← Database

CVE-2009-3513

MEDIUM CVSS: 4.3 Published: 2009-10-01 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php.

Affected Platforms

Pilotgroup Pg Etraining

Weakness Type

CWE-79

References