174 matches found
CVE-2022-27104
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
Sql injection
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
CVE-2022-27104
CVE-2022-27104 affects Forma LMS prior to v1.4.3 . The vulnerability is an Unauthenticated time-based blind SQL injection arising from inadequate validation of externally supplied SQL statements. Impact is described as high/severe in CVSS terms, with potential confidentiality, integrity, and avai...
CVE-2022-27104
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
PT-2022-18222
Name of the Vulnerable Software and Affected Versions Forma LMS versions prior to 1.4.3 Description An Unauthenticated time-based blind SQL injection issue exists. This allows for potential exploitation without authentication. Recommendations For versions prior to 1.4.3, update to version 1.4.3 o...
CVE-2022-27104: Improper Neutralization of Special Elements used in an SQL Command
An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...
Forma Learning Management System SQL Injection Vulnerability
Forma Learning Management System LMS is a Learning Management System LMS. A security vulnerability exists in Learning Management System v 1.0, which can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter and obtain sensitive database information...
Forma LMS 2.3 Cross Site Scripting
Exploit Title: Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting Date: 04-12-2020 Exploit Author: Hemant Patidar HemantSolo Vendor Homepage: https://www.formalms.org/download.html Software Link: https://www.formalms.org/ Version: 2.3 Tested on: Windows 10/Kali Linux...
Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting
Exploit Title: Forma LMS 2.3 - 'First & Last Name' Stored Cross-Site Scripting Date: 04-12-2020 Exploit Author: Hemant Patidar HemantSolo Vendor Homepage: https://www.formalms.org/download.html Software Link: https://www.formalms.org/ Version: 2.3 Tested on: Windows 10/Kali Linux...
forma-eltech.fr Cross Site Scripting vulnerability OBB-1376624
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
forma-d.bg Cross Site Scripting vulnerability
Security Researcher ImPRINCE Helped patch 123 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting forma-d.bg website and its users. Following coordinated and responsible vulnerability...
forma.lms <= 2.2.1 Multiple SQL Injection Vulnerabilities
Forma Learning Management System is prone to multiple SQL injection vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...
forma.lms Detection (HTTP)
Checks whether Forma Learning Management System is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under th...
Forma Learning Management System SQL Injection Vulnerability (CNVD-2019-44282)
Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...
Forma Learning Management System SQL Injection Vulnerability (CNVD-2019-44281)
Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...
Forma Learning Management System SQL Injection Vulnerability (CNVD-2020-02570)
Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...
CVE-2019-5110
Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...
CVE-2019-5110
Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...
CVE-2019-5111
Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filtercat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters...
CVE-2019-5112
Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filterstatus was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with...