coursemill learning management system vulnerabilities and fixes

Recent CVEs affecting coursemill learning management system, with upgrade or downgrade steps. 10 tracked.

Also searched as: coursemilllearningmanagementsystem.

coursemill learning management system has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2013-09-06. Highest priority: CVE-2013-3599 (score 53/100).

• CVE-2013-5708 MEDIUM 6.8 DOWNGRADE Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it
• CVE-2013-5707 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow r
• CVE-2013-5706 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow r
• CVE-2013-3605 MEDIUM 6.8 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remo
• CVE-2013-3604 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow r
• CVE-2013-3603 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote atta
• CVE-2013-3602 HIGH 7.5 DOWNGRADE SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allo
• CVE-2013-3601 MEDIUM 6.0 DOWNGRADE Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows re
• CVE-2013-3600 HIGH 8.5 DOWNGRADE Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a mod
• CVE-2013-3599 HIGH 9.3 DOWNGRADE userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privi

FAQ

How do I fix coursemill learning management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is coursemill learning management system being exploited right now?

None of the tracked coursemill learning management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which coursemill learning management system CVE should I patch first?

CVE-2013-3599 currently ranks highest (53/100): userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privi.

RSS feed for coursemill learning management system · ← Back to latest CVEs