CVE-2013-3601 | BDVDB-2026-57253 Detail

Description#

Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/960908

Exploit#

No public exploit known

History#

Version 12013-09-06Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.