CVE-2022-47131

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows an attacker to arbitrarily create a page...

PT-2023-15178 · Unknown · Academy Lms

Name of the Vulnerable Software and Affected Versions: Academy LMS versions prior to 5.10 Description: A Cross-Site Request Forgery CSRF issue allows attackers to arbitrarily add Administrator users. Recommendations: For versions prior to 5.10, update to version 5.10 or later to resolve the issue...

CVE-2022-47130: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page...

CVE-2022-47130

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page...

PT-2023-15177

Name of the Vulnerable Software and Affected Versions Academy LMS versions prior to 5.10 Description A Cross-Site Request Forgery CSRF issue allows an attacker to arbitrarily create a page. Recommendations For versions prior to 5.10, update to version 5.10 or later to resolve the issue...

CVE-2022-47131: Improper Neutralization of Input During Web Page Generation

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows an attacker to arbitrarily create a page...

CVE-2022-47132: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users...

CVE-2022-47132

CVE-2022-47132 affects Academy LMS prior to v5.10, where a CSRF vulnerability allows an attacker to arbitrarily add Administrator users. The issue stems from CSRF in the admin-creation workflow; CVSS v3.1 base score 8.8 (HIGH) with network attack vector, no privileges required, user interaction r...

CVE-2022-47131

CVE-2022-47131 affects Academy LMS versions prior to 5.10. The vulnerability is a Cross-Site Request Forgery (CSRF) that allows an attacker to arbitrarily create a page. Several sources (Red Hat, NVD, CN) corroborate the CSRF impact on the platform. The accompanying connected document set include...

CVE-2022-47130

CVE-2022-47130 concerns a CSRF vulnerability in the Academy LMS prior to version 5.10 . The issue: an attacker with administrative privileges can trigger a request via a crafted CSRF page, allowing arbitrary creation of discount coupons. Affected component is the web application’s coupon/discount...

Academy LMS 5.11 Cross Site Scripting

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

CVE-2022-38553

Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

Cross site scripting

Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2022-38553

Academy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Search parameter...

CVE-2022-38553

The CVE-2022-38553 entry concerns the Academy Learning Management System prior to v5.9.1, which contains a reflected Cross-Site Scripting (XSS) vulnerability in the Search parameter. The Nuclei template and Red Hat/NVD entries corroborate: an XSS flaw that can be triggered via the Search/queries,...

CVE-2022-29380

Academy-LMS v4.3 was discovered to contain a stored cross-site scripting XSS vulnerability in the SEO panel...

CVE-2022-29380

Academy-LMS v4.3 was discovered to contain a stored cross-site scripting XSS vulnerability in the SEO panel...

CVE-2022-29380

Academy-LMS v4.3 was discovered to contain a stored cross-site scripting XSS vulnerability in the SEO panel...

Cross site scripting

Academy-LMS v4.3 was discovered to contain a stored cross-site scripting XSS vulnerability in the SEO panel...

CVE-2022-29380

The connected records confirm CVE-2022-29380 affects Creativeitem Academy-LMS v4.3, with a stored cross-site scripting (XSS) vulnerability in the SEO panel. The root cause is described as a lack of data validation/filtering of user-supplied data and output in the SEO panel, enabling injection of ...