CVE-2023-45878

CVE-2023-45878 GibbonEdu Gibbon Exploit Version 25.0.1 GibbonEdu Gibbon Version 25.0.1 und früher GibbonEdu Gibbon Version 25.0.1 und früher ermöglicht beliebiges Schreiben von Dateien Arbitrary File Write Weitere Informationen https://nvd.nist.gov/vuln/detail/CVE-2023-45878...

CVE-2024-34831

CVE-2024-34831 Vulnerabilidade XSS no GibbonEdu Core v26.0.00 levando à Escalada de Privilégios Gibbon é um fantástico sistema de gestão escolar completo e de código aberto. Muito esforço está sendo feito para reformular a base de código bastante antiga. Autor: Christian Bajada 1. Vulnerabilidade...

CVE-2023-45878

CVE-2023-45878 CVE-2023-45878 GibbonEdu Escrita Arbitrária de Arquivos...

CVE-2023-45878

CVE-2023-45878 GibbonEdu Gravação Arbitrária de Arquivos para Execução de Web Shell Descrição Este repositório contém um exploit para a CVE-2023-45878 , uma vulnerabilidade de gravação arbitrária de arquivos no GibbonEdu. A vulnerabilidade afeta o endpoint rubricsvisualisesaveAjax.php e permite q...

Gibbon v25.0.0 - Cross-Site Scripting

Multiple Cross-Site Scripting XSS vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code. id: CVE-2023-34599 info: name: Gibbon v25.0.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Multiple Cross-Site...

Gibbon v25.0.0 - Local File Inclusion

Gibbon v25.0.0 is vulnerable to a Local File Inclusion LFI vulnerability where it's possible to include the content of several files present in the installation folder in the server's response. id: CVE-2023-34598 info: name: Gibbon v25.0.0 - Local File Inclusion author: DhiyaneshDk severity:...

CVE-2023-45881

GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resourcesaddQuickajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response...

EUVD-2023-50144

Malicious code in bioql PyPI...

EUVD-2023-50145

Malicious code in bioql PyPI...

EUVD-2023-50146

Malicious code in bioql PyPI...

CVE-2023-45879

GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component...

CVE-2023-45880

GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname and extension. This allows creation of PHP files outside of the uploads...

CVE-2023-45878

GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubricsvisualisesaveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set...

Exploit for Out-of-bounds Write in Gibbonedu Gibbon

CVE-2023-45878 GibbonEdu Arbitrary File Write to Web Shell...

Exploit for Out-of-bounds Write in Gibbonedu Gibbon

CVE-2023-45878 GibbonEdu Gibbon Exploit version 25.0.1 Gi...

Exploit for Cross-site Scripting in Gibbonedu Gibbon

CVE-2024-34831 XSS Vulnerability in GibbonEdu Core v26.0.00 le...

Gibbon LMS < v26.0.00 - Authenticated RCE

Exploit Title: Gibbon LMS has a PHP Deserialization vulnerability on the v26.0.00 version Date: 22.01.2024 Exploit Author: SecondX.io Research TeamAli Maharramli,Fikrat Guliev,Islam Rzayev Vendor Homepage: https://gibbonedu.org/ Software Link: https://github.com/GibbonEdu/core Version: v26.0.00...

CVE-2023-45878

GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubricsvisualisesaveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set...

CVE-2023-45880

GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can create a new Asset Component. The templateFileDestination parameter can be set to an arbitrary pathname and extension. This allows creation of PHP files outside of the uploads...

CVE-2023-45881

GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resourcesaddQuickajaxProcess.php file upload with resultant XSS. The imageAsLinks parameter must be set to Y to return HTML code. The filename attribute of the bodyfile1 parameter is reflected in the response...