CVE-2022-28986

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

CVE-2022-28986

The CVE-2022-28986 entry concerns LMS Doctor Simple 2 Factor Authentication Plugin for Moodle (affected: 2021072900). The vulnerability is an Insecure Direct Object Reference (IDOR) that could let an attacker remotely update sensitive records (email, password, phone number) of other user accounts...

PT-2022-19344

Name of the Vulnerable Software and Affected Versions LMS Doctor Simple 2 Factor Authentication Plugin For Moodle version 2021072900 Description The issue allows remote attackers to update sensitive records, such as email, password, and phone number, of other user accounts due to an Insecure Dire...

CVE-2022-28986: Authorization Bypass Through User-Controlled Key

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

Moodle和Darwin Factor 安全漏洞

LMS Doctor 2 Factor Authentication for Moodle is a Moodle plugin for secondary authentication from LMS Doctor. A security vulnerability exists in LMS Doctor 2 Factor Authentication for Moodle that stems from the presence of a double authentication 2FA bypass issue. A remote attacker could use thi...

Desire2Learn Learning Management System Access Control Error Vulnerability

An access control error vulnerability exists in Desire2Learn Learning Management System, a learning management system from Desire2Learn Canada, due to improper access controls. A remote attacker could disable the "Disable Right Click Control"...

CVE-2022-27104

An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...

CVE-2022-27104

An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...

Sql injection

An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...

CVE-2022-27104

An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...

CVE-2022-27104

CVE-2022-27104 affects Forma LMS prior to v1.4.3 . The vulnerability is an Unauthenticated time-based blind SQL injection arising from inadequate validation of externally supplied SQL statements. Impact is described as high/severe in CVSS terms, with potential confidentiality, integrity, and avai...

PT-2022-11791 · Desire2Learn · Desire2Learn/D2L Learning Management System +1

Name of the Vulnerable Software and Affected Versions: Desire2Learn/D2L Learning Management System LMS version 20.21.7 Description: A bypass exists in the quizzing feature of Desire2Learn/D2L Brightspace, allowing a quiz-taker to access print and copy functionality via the browser's right click...

CVE-2022-27104: Improper Neutralization of Special Elements used in an SQL Command

An Unauthenticated time-based blind SQL injection vulnerability exists in Forma LMS prior to v.1.4.3...

PT-2022-18222

Name of the Vulnerable Software and Affected Versions Forma LMS versions prior to 1.4.3 Description An Unauthenticated time-based blind SQL injection issue exists. This allows for potential exploitation without authentication. Recommendations For versions prior to 1.4.3, update to version 1.4.3 o...

Chamilo LMS Code Injection Vulnerability (CNVD-2022-33810)

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. Chamilo LMS v1.11.13 contains a code injection vulnerability that could be exploited by a...

Chamilo LMS has an unspecified vulnerability

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. Chamilo LMS v1.11.13 has a security vulnerability that could be exploited by an attacker ...

Chamilo LMS Cross-Site Scripting Vulnerability (CNVD-2022-33808)

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. Chamilo LMS v1.11.13 has a cross-site scripting vulnerability, and no detailed...

Chamilo LMS server-side request forgery vulnerability

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association that supports the creation of instructional content, remote training, and online question answering. The system supports the creation of instructional content, remote training and online question...

Chamilo LMS SQL Injection Vulnerability (CNVD-2022-33807)

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training and online question answering, etc. Chamilo LMS v1.11.13 is vulnerable to SQL injection, and no detailed vulnerability...

Chamilo LMS Cross-Site Scripting Vulnerability (CNVD-2022-33806)

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. Chamilo LMS v1.11.13 contains a cross-site scripting vulnerability that could be exploite...