CVE-2007-6338 - CVE House
Back to Database
Status published High CVE-2007-6338

SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning...

Vulnerability Description

SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via the user parameter (username field). NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6338

Credits & Attribution

No credits recorded in the NVD database.

References

More from trivantis

View All →
CVE-2013-5708
Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based...
Medium 6.8
CVE-2013-5707
Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System...
Medium 4.3
CVE-2013-5706
Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System...
Medium 4.3
CVE-2013-3605
Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System...
Medium 6.8
CVE-2013-3604
Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System...
Medium 4.3

Affected Vendor

Affected Software

coursemill enterprise learning management system
Vulnerable Versions:
4.1

Timeline

Official Publish: December 15th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.