CVE-2020-12429: Improper Neutralization of Special Elements used in an SQL Command

Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/checkavailability.php, admin/index.php, change-password.php, checkavailability.php, includes/header.php,...

PT-2020-13109

Name of the Vulnerable Software and Affected Versions Online Course Registration version 2.0 Description The issue concerns multiple SQL injections that can lead to a complete database compromise and authentication bypass in various login pages, including admin/change-password.php, admin/check...

Online Course Registration 2.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Authentication Bypass Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: 2.0...

Logic Flaw Vulnerability in the Course Center System of Shanghai Excellence Ruixin Digital Technology Co.

Curriculum Center System is a teaching and learning system specially developed by Shanghai Excellence Ruixin Digital Technology Co. for teaching in colleges and universities. A logic flaw exists in the Shanghai Excellence Ruixin Digital Technology Co., Ltd Course Center System, which can be...

PT-2020-10488

Name of the Vulnerable Software and Affected Versions Open edX Ironwood.1 Description The issue allows for reflected XSS when the course id parameter is used in the support/certificates endpoint. Recommendations For Open edX Ironwood.1, consider restricting access to the support/certificates...

Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)

Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery Add User Exploit Title: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery Add User Date: 2020-01-30 Vendor Homepage: https://www.themeum.com/product/tutor-lms/ Vendor Changelog: https://wordpress.org/plugins/tutor/developer...

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

CVE-2020-9337

CVE-2020-9337 affects GolfBuddy Course Manager 1.1, where passwords are transmitted via a GET request using base64 encoding. This exposes confidential data because base64 is not encryption and GET parameters can be logged or exposed in browser history and server logs. NVD CVSS3.1 vector CVSS:3.1/...

PT-2020-20592

Name of the Vulnerable Software and Affected Versions GolfBuddy Course Manager version 1.1 Description The issue involves sending passwords via a GET request with base64 encoding. This is a security concern as sensitive information like passwords should not be transmitted in such a manner due to...

CVE-2020-9337: Exposure of Sensitive Information to an Unauthorized Actor

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

Deal: Cloud And Networking Certification Training ~ Get 97% OFF

Cloud computing and networking are two of the most significant areas of growth in the IT business. Companies need engineers who can maintain distributed software and keep the company connected. If you want to work in either niche, the Essential Cloud & Networking Certification Training Bundle...

Moodle Information Disclosure Vulnerability (CNVD-2020-10127)

Moodle is a learning platform designed to provide educators, administrators, and learners with a powerful, secure, and integrated system for creating personalized learning environments. An information disclosure vulnerability exists in Moodle versions prior to 3.7.2. An attacker could exploit the...

CVE-2020-1692

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

Information disclosure

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

CVE-2020-1692

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

UBUNTU-CVE-2020-1692

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

CVE-2019-18210

Persistent XSS in /course/modedit.php of Moodle through 3.7.2 allows authenticated users Teacher and above to inject JavaScript into the session of another user e.g., enrolled student or site administrator via the introeditortext parameter. NOTE: the discoverer and vendor disagree on whether Mood...