5346 matches found
WordPress LearnDash LMS – Reports Plugin <= 1.8.2 is vulnerable to Broken Access Control
Software LearnDash LMS – Reports Type Plugin Vulnerable versions = 1.8.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-5648 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 36a198e999f6 Credits Lucio Sá Required...
CVE-2024-38959
Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter...
PT-2024-27420
Name of the Vulnerable Software and Affected Versions Tutor LMS versions n/a through 2.7.1 Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for potential exploitation by injecting malicious SQL...
CVE-2024-38959: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter...
WordPress plugin LearnDash LMS security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
CVE-2024-38959
The Creativeitem Academy LMS Learning Management System version v.6.8.1 is affected by a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit this flaw by targeting a string parameter to execute arbitrary code and access sensitive information. No specific remediation steps or e...
CVE-2024-5648: Missing Authorization
The LearnDash LMS – Reports plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions i.e. wrldsetconfiguration, wrldexcludesettingssave, applytimetrackingsettings, wpajaxwrldgutenbergblockvisit, etc.. in all versions up to, and...
PT-2024-28293
Name of the Vulnerable Software and Affected Versions Creativeitem Academy LMS Learning Management System version 6.8.1 Description The issue allows a remote attacker to execute arbitrary code and obtain sensitive information. This is achieved via the string parameter. Recommendations For version...
WordPress plugin Tutor LMS SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
CVE-2024-38959
Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter...
CVE-2024-37256: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.1...
CVE-2024-37266: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Themeum Tutor LMS allows Path Traversal.This issue affects Tutor LMS: from n/a through 2.7.1...
PT-2024-27431 · Themeum · Tutor Lms
Name of the Vulnerable Software and Affected Versions: Tutor LMS versions n/a through 2.7.1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, in Themeum Tutor LMS. This vulnerability allows Path...
WordPress plugin Tutor LMS path traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unres...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unres...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
PoC exploit for CVE-2023-4220, a remote code execution vulnerabi...
Exploit for Unrestricted Upload of File with Dangerous Type in Chamilo Chamilo_Lms
Chamilo LMS Unauthenticated Big Upload File RCE PoC This is a...
