Coursemill Learning Management System
Vendor:
First CVE: Sep 6, 2013 · Active for 12 years
10
Total CVEs
More Total CVEs than 89% of tracked products
10.0
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
6.2
Avg CVSS
Higher Avg CVSS than 29% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Coursemill Learning Management System over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 6, 2013
12 years ago
Most Recent CVE
Sep 6, 2013
4,708 days ago
CVE Severity & Scoring
Coursemill Learning Management System10 CVEs
70%
30%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown10 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown10 (100.0%)
User Interaction
None0 (0.0%)
Unknown10 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown10 (100.0%)
Top CVEs
Signals from CVEs in this product scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-3599HIGH userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html. | Sep 6, 2013 | 9.3 | 23 | NO | NO |
CVE-2013-5708MEDIUM Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSR | Sep 6, 2013 | 6.8 | 21 | NO | NO |
CVE-2013-3600HIGH Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecified functions. | Sep 6, 2013 | 8.5 | 21 | NO | NO |
CVE-2013-3602HIGH SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to execute arbitrary SQL commands via th | Sep 6, 2013 | 7.5 | 19 | NO | NO |
CVE-2013-3605MEDIUM Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the authentication of arbitrary users via vecto | Sep 6, 2013 | 6.8 | 18 | NO | NO |
CVE-2013-3603MEDIUM Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to er | Sep 6, 2013 | 4.3 | 18 | NO | NO |
CVE-2013-5707MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or HTML via crafted inp | Sep 6, 2013 | 4.3 | 17 | NO | NO |
CVE-2013-5706MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or HTML via vectors rel | Sep 6, 2013 | 4.3 | 17 | NO | NO |
CVE-2013-3601MEDIUM Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by levera | Sep 6, 2013 | 6.0 | 17 | NO | NO |
CVE-2013-3604MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject arbitrary web script or HTML via crafted inp | Sep 6, 2013 | 4.3 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (10 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (10 CVEs).
Media Mentions
Signals from CVEs in this product scope (10 CVEs).
Top CNAs Publishing CVEs For Coursemill Learning Management System
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 6.8 | 4 | 6.2 | 1.2% | 0 | 0 |
| 6.6 | 7 | 6.7 | 1.2% | 0 | 0 |