high7.5
CVE-2013-3602
SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to execute arbitrar…
Impact
SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to execute arbitrary SQL commands via the docID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trivantis | Coursemill Learning Management System | Version 6.6 |