2692 matches found
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS – eLearning and online course solution allows Stored XSS.This issue affects Tutor LMS – eLearning and online course solution: from n/a through 2.2.4...
CVE-2023-49829
CVE-2023-49829 pertains to the Tutor LMS WordPress plugin (Tutor LMS – eLearning and online course solution) and describes an issue where input is not properly sanitized during web page generation, allowing stored XSS. Affected versions are Tutor LMS
CVE-2023-49829: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeum Tutor LMS – eLearning and online course solution allows Stored XSS.This issue affects Tutor LMS – eLearning and online course solution: from n/a through 2.2.4...
CVE-2023-6766
A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...
Cross site request forgery (csrf)
A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...
CVE-2023-6766 PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery
A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...
CVE-2023-6766 PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery
A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...
CVE-2023-6766: Cross-Site Request Forgery (CSRF)
A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...
PT-2023-32767 · Unknown · Phpgurukul Teacher Subject Allocation Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A problematic vulnerability has been found in the PHPGurukul Teacher Subject Allocation Management System. The issue affects an unknown function of the file...
Teacher Subject Allocation Management System Cross-Site Request Forgery Vulnerability
Teacher Subject Allocation Management System is a Teacher Subject Allocation Management System. A cross-site request forgery vulnerability exists in version 1.0 of the PHPGurukul Teacher Subject Allocation Management System, which stems from the parameter delid in the file /admin/course.php that...
PT-2023-29801 · WordPress · Namaste! Lms
Name of the Vulnerable Software and Affected Versions: Namaste! LMS plugin for WordPress versions up to, and including, 2.6.1.1 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts via the course...
VulnCheck KEV: CVE-2022-28079
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the coursecode parameter...
ILIAS < 7.24, 8.x < 8.4 Multiple Vulnerabilities
ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...
GHSA-9GQP-3G28-W9XC Moodle Cross-site Scripting vulnerability
The course upload preview contained an XSS risk for users uploading unsafe data...
Moodle Cross-site Scripting vulnerability
The course upload preview contained an XSS risk for users uploading unsafe data...
CVE-2023-5547
The course upload preview contained an XSS risk for users uploading unsafe data...
CVE-2023-5547
The course upload preview contained an XSS risk for users uploading unsafe data...
CVE-2023-5540
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...
