PT-2009-2616 · Intralearn · Intralearn

Publicado 2009-09-01 · Atualizado 2009-09-03 · CVE-2008-7147

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IntraLearn Software IntraLearn versions 2.1 through 4.2.3

Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the outline and course parameters to the "library/description link.cfm" endpoint, or the records to display and the start parameters to the "library/courses catalog.cfm" endpoint.

Recommendations For IntraLearn Software IntraLearn versions 2.1 through 4.2.3, update to version 4.2.3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2008-7147

Produtos afetados

Intralearn

Referências · 4

• http://osvdb.org/42988 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7147 · Nota de Segurança
• http://osvdb.org/ref/42/intralearn-21-multiple.txt · Nota
• http://osvdb.org/42989 · Nota