Design/Logic Flaw

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

CVE-2018-1000535 concerns LMS, where versions up to and including LMS_011123 expose a Local File Disclosure in the LMS module’s file-reading functionality. The vulnerability can allow reading server files and is reported to be exploitable via a GET parameter. The issue’s impact is described as pa...

Security Bulletin: A cross-site scripting vulnerablity has been addressed in IBM Kenexa LMS on Cloud 5.1

Summary A cross-site scripting vulnerablity has been addressed in IBM Kenexa LMS on Cloud 5.1 Vulnerability Details CVEID: CVE-2016-8935 DESCRIPTION: IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu...

Security Bulletin: Multiple security vulnerabilities have been addressed in LMS 5.0 on Cloud

Summary Multiple security vulnerabilities have been addressed in LMS 5.0 on Cloud Vulnerability Details CVEID: CVE-2016-6126 DESCRIPTION: IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing...

Security Bulletin: An SQL Injection has been addressed in LMS 5.2 Patch

Summary IBM Kenexa LMS on Cloud addressed a vulnerable which could allow a remote attacker to send specially-crafted SQL statements, which could allow them to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID: CVE-2016-5939 DESCRIPTION: IBM Kenexa LMS o...

Security Bulletin: Multiple Security Vulnerabilities have been addressed in LMS 6.0 on Cloud

Summary Multiple Security Vulnerabilities have been addressed in LMS 6.0 on Cloud Vulnerability Details CVEID: CVE-2016-5938 DESCRIPTION: IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system. CVSS Base Score: 4 CVSS Temporal Score: See...

Security Bulletin: A vulnerability in Open Source BeanShell has been addressed by IBM Kenexa LMS (CVE-2016-2510)

Summary A vulnerability in Open Source BeanShell has been addressed by LMS Vulnerability Details CVEID: CVE-2016-2510 DESCRIPTION: BeanShell could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data using Java serialization or XStream. ...

ILIAS LMS Multiple Vulnerabilities-02 (May 2018)

ILIAS LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; ifdescription...

ILIAS LMS 5.1.x < 5.1.26 Multiple Vulnerabilities (May 2018)

ILIAS LMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; ifdescription...

Mooscan - A Scanner For Moodle LMS

A scanning tool for Moodle LMS. Key Benefits Allows administrators to determine exactly what is visible externally in their Moodle installation. A tool for penetration testers to find potential vulnerabilities in a Moodle installation by enumerating installed plugins, themes and libraries. Road M...

Advance Loan Management System - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advance Loan Management System - 'id' SQL Injection Exploit Author: 8bitsec Vendor Homepage: https://codecanyon.net/ Software Link:...

WordPress Learning Management System Plugin - course_id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Good LMS - Learning Management System WP Plugin SQL Injection Exploit Author Web Site: http://esecurity.ir Special Thanks : Meisam Monsef email protected - Telegram ID : @meisamrce Vendor Homepage: https://goodlayers.com/ Versio...

WordPress Good LMS SQL Injection

Exploit Title: Good LMS - Learning Management System WP Plugin SQL Injection Date: 2018-01-24 Exploit Author: Esecurity.ir Exploit Author Web Site: http://esecurity.ir Special Thanks : Meisam Monsef [email protected] - Telegram ID : @meisamrce Vendor Homepage: https://goodlayers.com/ Version: A...

WordPress LearnDash LMS plugin <=2.5.3 - Unauthenticated Arbitrary File Upload vulnerability

An unauthenticated arbitrary file upload vulnerability by NinTechNet in WordPress LearnDash LMS plugin versions =2.5.3. Solution Update the WordPress LearnDash LMS plugin to the latest available version at least 2.5.4...

ATutor LMS Cross-Site Scripting Vulnerability

ATutor LMS is an open source web-based learning management system LCMS. The system provides course settings, textbook package downloads, multiple reading options, and other features. A cross-site scripting vulnerability exists in ATutor LMS version 2.2. A remote attacker can exploit this...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...

CVE-2015-6521

Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...

CVE-2015-6521

Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...

CVE-2015-6521

ATutor LMS version 2.2 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CNVD entry states a cross-site scripting flaw exists in ATutor LMS 2.2, allowing a remote attacker to inject arbitrary web script or HTML. The NVD entry corroborates XSS in ATutor LMS 2.2 with CVSS v3 b...