PT-2022-8563 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.9.1 Moodle versions prior to 3.8.4 Moodle versions prior to 3.7.7 Moodle versions prior to 3.5.13 Description: The issue allows teachers of a course to assign themselves the manager role within that course...

CVE-2020-26876: Missing Authentication for Critical Function

The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step for course videos and materials by using the /wp-json REST API, as exploited in the wild in September 2020. This occurs because showinrest is enabled for custom post types e.g.,...

Moodle cross-site scripting vulnerability (CNVD-2021-28782)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a security vulnerability that stems from a failure of a network system or product to properly filter specific...

CVE-2020-23828

A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses...

CVE-2020-23828

A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses...

CVE-2020-23828

The CVE-2020-23828 entry concerns SourceCodester Online Course Registration v1.0. A File Upload vulnerability allows remote attackers to achieve Remote Code Execution by uploading a crafted PHP web-shell that bypasses image-upload filters, exploiting the /Online%20Course%20Registration/my-profile...

CVE-2020-23828

A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses...

evolanguage-online-course.de Cross Site Scripting vulnerability OBB-1338036

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-23828: Unrestricted Upload of File with Dangerous Type

A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload filters. An attack uses...

PT-2020-15586

Name of the Vulnerable Software and Affected Versions SourceCodester Online Course Registration version 1.0 Description A File Upload issue allows remote attackers to achieve Remote Code Execution RCE on the hosting webserver by uploading a crafted PHP web-shell that bypasses the image upload...

openSIS SQL Injection Vulnerability (CNVD-2020-52047)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the id parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-51262)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the meetdate parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...

openSIS SQL Injection Vulnerability (CNVD-2020-50527)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the courseperiodid parameter in MassScheduleSessionSet.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection...

openSIS SQL Injection Vulnerability (CNVD-2020-51260)

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the courseperiodid parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection atta...

CVE-2020-6130

SQL injection vulnerabilities exist in the courseperiodid parameters used in OS4Ed openSIS 7.3 pages. The courseperiodid parameter in the page MassDropSessionSet.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities...

PT-2020-18944

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description SQL injection vulnerabilities exist in the course period id parameters used in OS4Ed openSIS pages. The course period id parameter in the page "MassDropSessionSet.php" is vulnerable to SQL injection. An...

PT-2020-18945

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description SQL injection vulnerabilities exist in the course period id parameters used in OS4Ed openSIS pages. The course period id parameter in the page "MassScheduleSessionSet.php" is vulnerable to SQL injection. A...

PT-2020-18940

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the CoursePeriodModal.php page. The course period id parameter in this page is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger thi...

PT-2020-18943

Name of the Vulnerable Software and Affected Versions openSIS version 7.3 Description The issue concerns SQL injection vulnerabilities in the course period id parameters used in openSIS pages, specifically in the CpSessionSet.php page. An attacker can exploit this by making an authenticated HTTP...

Moodle Permission License and Access Control Issues Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A privilege permission and access control issue vulnerability exists in Moodle, which stems from the program not performing proper...