Pilotgroup

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Pilotgroup records in CISA KEV

No Pilotgroup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Elms Pro 3 records LOW Allsharevideo 1 record MEDIUM Pg Etraining 1 record LOW Pg Job Site Pro 1 record LOW

Records

6 records

TI-2017-11699 CVE-2017-15969 · GHSA-2478-272w-hp6m

PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag…

MEDIUM 46

PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_catalog/category.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02066 Published 2017-10-29 No fix listed CWE-89

TI-2010-02260 CVE-2010-2354 · GHSA-x32m-pghh-vxqf

SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote…

LOW 35

SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary SQL commands via the course_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2010-06-21 No fix listed CWE-89

TI-2008-05811 CVE-2008-6117 · GHSA-84q4-jcj4-83j4

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to…

LOW 35

SQL injection vulnerability in homepage.php in PG Job Site Pro allows remote attackers to execute arbitrary SQL commands via the poll_view_id parameter in a results action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01003 Published 2009-02-11 No fix listed CWE-89

TI-2010-02262 CVE-2010-2356 · GHSA-w9fq-cmgx-h44f

Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro…

LOW 23

Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the course_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2010-06-21 No fix listed CWE-79

TI-2010-02261 CVE-2010-2355 · GHSA-6rr4-jv72-pv85

Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows…

LOW 23

Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the message parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01462 Published 2010-06-21 No fix listed CWE-79

TI-2009-03351 CVE-2009-3513 · GHSA-cgf9-7f38-5j6c

Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) n…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01502 Published 2009-10-01 No fix listed CWE-79

Open these records in search →

Critical	1
High	2
Medium	3
Low	0
No CVSS	0