MasterStudy LMS < 3.0.9 - Subscriber+ Course Category Creation

The plugin does not have authorisation when creating category courses, allowing any authenticated users, such as subscriber to create arbitrary course category...

CVE-2023-1592: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file admin/courses/viewclass.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

PT-2023-17101 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System

Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical vulnerability was found in the SourceCodester Automatic Question Paper Generator System. This issue affects the file admin/courses/view class.php of...

CVE-2023-1441

CVE-2023-1441 affects SourceCodester Automatic Question Paper Generator System 1.0, impacting the GET Parameter Handler in admin/courses/view_course.php. The root cause is a vulnerability in the id parameter that enables SQL injection, allowing remote exploitation without user interaction. Multip...

SourceCodester Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...

CVE-2023-1441: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/viewcourse.php of the component GET Parameter Handler. The manipulation of the argument i...

SQL Injection

moodle/moodle is vulnerable to SQL Injection. The vulnerability is due to improper SQL sanitization in lib.php, allowing an authenticated attacker to inject and execute malicious SQL queries when viewing a users recent courses, leading to Information Disclosure...

Moodle SQL Injection vulnerability

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

GHSA-F46J-R7Q3-6CM2 Moodle SQL Injection vulnerability

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses...

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses...

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

Sql injection

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

Sql injection

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses...

UBUNTU-CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses...

UBUNTU-CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses...

CVE-2021-36392: Improper Neutralization of Special Elements used in an SQL Command

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses...