Vulnerabilities

TI-2010-02262 CVE-2010-2356 · GHSA-w9fq-cmgx-h44f

Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro…

LOW 23

Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the course_id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2010-06-21 No fix listed CWE-79

TI-2010-02261 CVE-2010-2355 · GHSA-6rr4-jv72-pv85

Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows…

LOW 23

Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the message parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01462 Published 2010-06-21 No fix listed CWE-79

TI-2010-02260 CVE-2010-2354 · GHSA-x32m-pghh-vxqf

SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote…

LOW 35

SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary SQL commands via the course_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2010-06-21 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro…

Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows…

SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote…