CVE-2013-3602

Publication date

2013-09-06 10:00:00

Family

certcc

State

PUBLISHED

Description

SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to execute arbitrary SQL commands via the docID parameter.