Skip to content
Noroxi

trivantis records

11 published records for vendor trivantis.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    11 records
    • CVE-2013-3599
      38Monitor

      userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role

      CriticalCVSS 9.3No exploitEPSS 2%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-3600
      34Monitor

      Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecif

      HighCVSS 8.5No exploitEPSS 2%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2007-6338
      30Monitor

      SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers t

      HighCVSS 7.5No exploitEPSS 1%

      trivantis · coursemill enterprise learning management systemDec 14, 2007

    • CVE-2013-3602
      30Monitor

      SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users

      HighCVSS 7.5No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-5708
      27Monitor

      Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to

      MediumCVSS 6.8No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-3605
      27Monitor

      Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the aut

      MediumCVSS 6.8No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-3601
      24Monitor

      Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to pe

      MediumCVSS 6.0No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-5706
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbi

      MediumCVSS 4.3No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-5707
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbi

      MediumCVSS 4.3No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-3603
      17Monitor

      Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary web

      MediumCVSS 4.3No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013

    • CVE-2013-3604
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject arbi

      MediumCVSS 4.3No exploitEPSS 1%

      trivantis · coursemill learning management systemSep 6, 2013