26 matches found
CVE-2016-7712
CVE-2016-7712 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-7712
Multiple eval injection vulnerabilities in mods/standard/gradebook/editmarks.php in ATutor 2.2 and earlier allow remote authenticated users with the ATPRIVGRADEBOOK privilege to execute arbitrary PHP code via the 1 asc or 2 desc parameter...
CVE-2015-7712
ATutor 2.2 and earlier contains a PHP code injection vulnerability in mods/_standard/gradebook/edit_marks.php that allows remote authenticated users with AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via the asc or desc parameters. This is a classic eval/ injection flaw in the gradebo...
ATutor 2.2 PHP Code Injection
--------------------------------------------------------------- ATutor "name" 186. 187. $sort = '$grades'.$ordercol.', SORT'.strtoupper$order.', $selectedstudents ... 188. 189. foreach$selectedtests as $test 190. 191. if $test"gradebooktestid" $ordercol 192. $sort .= ',...
CVE-2014-7712
The CVE-2014-7712 entry describes an Android app issue in Tiket.com Hotel & Flight (com.tiket.gits) Android app version 1.1.2, where X.509 certificates are not verified by TLS servers. This root cause allows man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted...