Unscored severity · published Dec 15, 2007
CVE-2007-6338
SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via…
–
CVSS
1.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers to execute arbitrary SQL commands via the user parameter (username field). NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Coursemill Enterprise Learning Management System · Trivantis
4.1 · source: NVD
Affected product
CE
Coursemill Enterprise Learning Management System
Trivantis
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6338
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6338
Exploit
http://packetstorm.linuxsecurity.com/0712-exploits/trivantis-sql.txt
secunia.com
http://secunia.com/advisories/28098
securityreason.com
http://securityreason.com/securityalert/3450
www.osvdb.org
http://www.osvdb.org/39156
www.securityfocus.com
http://www.securityfocus.com/archive/1/485072/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/26865