854 matches found
WordPress CLUEVO LMS, E-Learning Platform plugin <= 1.8.0 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Rutuja D Shirke in WordPress CLUEVO LMS, E-Learning Platform plugin versions = 1.8.0. Solution Update the WordPress CLUEVO LMS, E-Learning Platform plugin to the latest available version at least 1.8.1...
OpenOlat has unspecified vulnerabilities
OpenOLAT is a web-based e-learning platform for teaching, learning, assessing and communicating with an LMS, a learning management system. a security vulnerability exists in versions of OpenOlat prior to 15.5.12 and 16.0.5, which stems from the fact that by providing a file name containing a...
e-learning.polban.ac.id Cross Site Scripting vulnerability OBB-2300116
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
e-learning-chodel.eurzad.eu Cross Site Scripting vulnerability OBB-2288268
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Moodle permission permission and access control issue vulnerability (CNVD-2021-93378)
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. moodle has a permission permission and access control issue vulnerability that stems from insufficient detection of functionality in t...
Moodle Cross-Site Request Forgery Vulnerability (CNVD-2021-92541)
Moodle is a free and open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. This could lead to cross-site request forgery attacks. No details of the vulnerability are currently available...
Moodle Input Validation Error Vulnerability (CNVD-2021-92540)
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. a security vulnerability exists in Moodle, which stems from a problem when the software restores backup files. an attacker could...
elearning.marcoaurelio.comune.roma.it Cross Site Scripting vulnerability OBB-2210825
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
e-learning.outsphera.it Cross Site Scripting vulnerability OBB-2210815
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-41152
OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere o...
CVE-2021-41152
OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere o...
Design/Logic Flaw
OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere o...
CVE-2021-41152
OpenOlat vulnerability CVE-2021-41152 is a path traversal issue in the folder component that allows an authenticated (or guest-enabled) user to manipulate the HTTP request and read files via a crafted download path. The attack can access files in web root or other locations, depending on server p...
All Vulnerabilities for elearning.bvu.edu.vn Patched via Open Bug Bounty
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| elearning.bvu.edu.vn ---|--- Open Bug...
SQL Injection Vulnerability in Higher Education Online Learning and Information Service Platform of Huaxia Earth Education Network
Ltd. is a large-scale enterprise focusing on distance learning content provision and learning support services. A SQL injection vulnerability exists in the Huaxia Dadi Education Network's higher education e-learning and information service platform, which can be exploited by an attacker to obtain...
SAP Enable Now Information Disclosure Vulnerability (CNVD-2021-42412)
SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. An information disclosure vulnerability exists in SAP Enable Now versions 1.0 and 10, which can be exploited by an...
ILIAS Information Disclosure Vulnerability
ILIAS is a powerful open source learning management system for developing and implementing web-based e-learning. An information disclosure vulnerability exists in ILIAS versions prior to 5.3.19, 5.4.12, and 6.0. An attacker can exploit this vulnerability to gain access to uploaded data paths via ...
Moodle cross-site scripting vulnerability (CNVD-2021-28733)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site scripting vulnerability that stems from Text-based feedback answers. No details of the vulnerability a...
Sourcecodester Pisay Online E-Learning System SQL Injection Vulnerability (CNVD-2021-95936)
Sourcecodester Pisay Online E-Learning System is an online e-learning system based on PHP and MySQL. Sourcecodester Pisay Online E-Learning System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in a database-based...