CVE-2022-31788

IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0= pathname...

CVE-2022-31786

IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...

CVE-2022-31786

IdeaLMS 2022 has a reported vulnerability: a reflected Cross Site Scripting (XSS) flaw that can be triggered via the path segment IdeaLMS/Class/Assessment/ in the application. The issue is described as a reflected XSS in IdeaLMS 2022, allowing an attacker to execute JavaScript code in the victim’...

CVE-2022-31788

IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname...

CVE-2022-31788

IdeaLMS 2022 contains a SQL injection vulnerability in the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname, enabling an attacker to manipulate queries. CVSS data indicates high/critical impact (C/I/A HIGH in CVSS3.1; base score 9.8). No remediation/version patch details ...