FormaLMS cross-site scripting vulnerabilities

FormaLMS is an open source learning management system. It is used to build around the specific needs of corporate training. A cross-site scripting vulnerability exists in FormaLMS versions prior to 4.0.5, which stems from the application's lack of effective filtering and escaping of user-supplied...

CVE-2023-46693: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters...

CVE-2023-46693

CVE-2023-46693 describes a Cross-Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5. The issue arises from insufficient filtering/escaping of user-supplied data, allowing an attacker to run arbitrary code by manipulating the title parameter. Affected software: FormaLMS versions prior to ...

CVE-2023-46693

Cross Site Scripting XSS vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters...

CVE-2023-46693

Cross Site Scripting XSS vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters...

formalms SQL Injection Vulnerability

formalms a learning management system. Used to build around the specific needs of corporate training. formalms versions prior to v.1.4.3 contain a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker could exploit this...

Formalms SQL Injection Vulnerability

formalms a learning management system. Used to build around the specific needs of corporate training. formalms versions prior to v.1.4.3 contain a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker could exploit this...

FormaLMS 2.4.4 - Authentication Bypass Exploit

Exploit Title: FormaLMS 2.4.4 - Authentication Bypass Google Dork: inurl:index.php?r=adm/ Exploit Author: Cristian 'void' Giustini @ Hacktive Security Vendor Homepage: https://formalms.org Software Link: https://formalms.org Version: = 2.4.4 Tested on: Linux CVE : CVE-2021-43136 Info: An...

FormaLMS 2.4.4 - Authentication Bypass

Exploit Title: FormaLMS 2.4.4 - Authentication Bypass Google Dork: inurl:index.php?r=adm/ Date: 2021-11-10 Exploit Author: Cristian 'void' Giustini @ Hacktive Security Vendor Homepage: https://formalms.org Software Link: https://formalms.org Version: = 2.4.4 Tested on: Linux CVE : CVE-2021-43136...

FormaLMS 2.4.4 Authentication Bypass

Exploit Title: FormaLMS 2.4.4 - Authentication Bypass Google Dork: inurl:index.php?r=adm/ Date: 2021-11-10 Exploit Author: Cristian 'void' Giustini @ Hacktive Security Vendor Homepage: https://formalms.org Software Link: https://formalms.org Version: = 2.4.4 Tested on: Linux CVE : CVE-2021-43136...

CVE-2021-43136

An authentication bypass issue in FormaLMS = 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform...

CVE-2021-43136

An authentication bypass issue in FormaLMS = 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform...

Authentication flaw

An authentication bypass issue in FormaLMS = 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform...

CVE-2021-43136

An authentication bypass issue in FormaLMS = 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform...

CVE-2021-43136

An authentication bypass issue in FormaLMS = 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform...

CVE-2021-43136

CVE-2021-43136 affects FormaLMS <= 2.4.4. The issue is an authentication bypass that allows an attacker to bypass the authentication mechanism and gain valid access to the platform. Across connected documents, sources describe the same vulnerability class (authentication bypass) and reference ...

CVE-2021-43136: Use of Hard-coded Credentials

An authentication bypass issue in FormaLMS = 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform...

PT-2021-23749

Name of the Vulnerable Software and Affected Versions FormaLMS versions 2.4.4 and earlier Description An authentication bypass issue allows an attacker to bypass the authentication mechanism and obtain valid access to the platform. Recommendations For FormaLMS versions 2.4.4 and earlier, update t...

FormaLMS Trust Management Vulnerabilities

FormaLMS is an open source learning management system organized by Forma.association. It is used to build around the specific needs of corporate training. A trust management issue vulnerability exists in FormaLMS = 2.4.4 that allows an attacker to bypass authentication mechanisms and gain valid...

PT-2020-16490

Name of the Vulnerable Software and Affected Versions forma.lms version 2.3.0.2 Description The issue allows for Cross Site Request Forgery CSRF in the "forma.lms" application, specifically in the "formalms/appCore/index.php" endpoint, when a GET request is made to...