2 matches found
CVE-2025-11102: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/editcontent.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be launched remotely. The exploit has been made available t...
9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
CVE-2024-54924: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /admin/editcontent.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters...
9.8CVSS6.3AI score0.006EPSS
SaveExploits1References1
20