EUVD-2019-19242

Malware in sbrugna...

CVE-2019-9886

Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...

CVE-2019-9886

Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...

Design/Logic Flaw

Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...

CVE-2019-9886

CVE-2019-9886 affects BroadLearning eClass up to version ip.2.5.10.2.1, where arbitrary files can be downloaded without authentication via URLs containing download_attachment.php under templates or home folders. Root cause/impact: unauthenticated access to sensitive files (no login required). Pub...

CVE-2019-9886: Improper Limitation of a Pathname to a Restricted Directory

Any URLs with downloadattachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1...

PT-2019-19919

Name of the Vulnerable Software and Affected Versions BroadLearning eClass versions prior to 2.5.10.2.1 Description The issue allows arbitrary files to be downloaded without a login, specifically affecting URLs with "download attachment.php" under templates or home folders. Recommendations For...