38 matches found
CVE-2024-32714
Missing Authorization vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.16...
CVE-2024-35171
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25...
CVE-2024-33912
Missing Authorization vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 1.9.16...
PT-2024-25545 · Unknown · Academy Lms
Name of the Vulnerable Software and Affected Versions: Academy LMS versions 1.9.16 and earlier Description: The issue is related to a Missing Authorization vulnerability in Academy LMS. Recommendations: For versions 1.9.16 and earlier, update to a version that includes a fix for this issue, as no...
WordPress Plugin Academy LMS Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress plugin i...
Creativeitem Academy-LMS Cross-Site Scripting Vulnerability
Creativeitem Academy-LMS is an online learning platform from Creativeitem, Inc. A cross-site scripting vulnerability exists in Creativeitem Academy-LMS version 6.0, which stems from the parameter query/sortby in the file /academy/home/courses that causes cross-site scripting...
CVE-2022-47132
A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users...
CVE-2022-47132
A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users...
CVE-2022-47130
A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page...
Academy Learning Management System 跨站请求伪造漏洞
Academy Learning Management System is an Academy Learning Management System by Creativeitem team. A security vulnerability exists in versions of Academy LMS prior to v5.10, which can be exploited by an attacker to add an administrator user...
Academy Learning Management System 跨站脚本漏洞
Academy Learning Management System is an Academy Learning Management System from the Creativeitem team. A security vulnerability exists in Academy Learning Management System versions prior to v5.10, which can be exploited by an attacker to create arbitrary pages...
Academy Learning Management System 跨站请求伪造漏洞
Academy Learning Management System is an Academy Learning Management System from the Creativeitem team. A security vulnerability exists in versions of Academy Learning Management System prior to v5.10, which can be exploited by an attacker to create discount coupons when interacting with a page...
Academy Learning Management System Reflective Cross-Site Scripting Vulnerability
Academy Learning Management System is an Academy Learning Management System from the Creativeitem team. The vulnerability is caused by the lack of effective filtering and escaping of user-supplied data in the Search parameter, which could be exploited to launch a reflective cross-site scripting...
CVE-2022-38553
Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
CVE-2022-38553
Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...
Academy Learning Management System 跨站脚本漏洞
Academy Learning Management System is an Academy Learning Management System from the Creativeitem team. The vulnerability is caused by the lack of effective filtering and escaping of user-supplied data in the Search parameter, which could be exploited to launch a reflective cross-site scripting...
PT-2022-24451 · Unknown · Academy Learning Management System
Name of the Vulnerable Software and Affected Versions: Academy Learning Management System versions prior to 5.9.1 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the Search parameter, allowing potential attackers to inject...
