medium4.3Public exploit code
CVE-2009-2149
Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the (1) courseid pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- campus virtual-lms - Cross-Site Scripting / SQL Injection2009-06-12 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the (1) courseid parameter to enrolments/step1.php, or the (2) search or (3) siteid parameter to files/shared_list.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Campusvirtualcomputrade | Campus Virtual-Lms | All versions |