4940 matches found
CVE-2012-6392
Cisco Prime LAN Management Solution LMS 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779...
CVE-2012-6392
CVE-2012-6392 affects Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux. The vulnerability arises because LMS does not properly validate authentication and authorization requests in TCP sessions, allowing remote attackers to execute arbitrary commands via a crafted session (por...
Cisco Prime LAN Management Solution Command Execution Vulnerability
Cisco Prime LAN Management Solution LMS Virtual Appliance contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the root user. The vulnerability is due to improper validation of authentication and authorization commands...
Docebo LMS 3605 HTML Injection
TITLE ....... Docebo LMS HTML Injection DATE ........ 15.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.docebo.com VERSION ..... docebo3605.zip TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the ty...
Docebo LMS 3605 SQL Injection
TITLE ....... Docebo LMS docebo3605.zip DATE ........ 15.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.docebo.com VERSION ..... docebo3605.zip TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the ty...
Docebo LMS <= v4.0.4 (messages) Remote Code Execution
No description provided by source. ?php / Docebo LMS = v4.0.4 messages remote code execution exploit vendor: http://www.docebo.com/ software link: http://www.docebo.com/community/doceboCms/ author: mrme::rwx kru email: steventhomasseeley!gmail!com "We must become the change we want to see in the...
Docebo Lms 4.0.4 - Messages Remote Code Execution
Docebo Lms 4.0.4 - Messages Remote Code Execution if$GLOBALS'modname' != '' $modulecfg =& createModule...
Docebo LMS 4.0.4 SQL Injection / Code Execution
if$GLOBALS'modname' != '' $modulecfg =& createModu...
Docebo LMS <= v4.0.4 (messages) Remote Code Execution
Exploit for php platform in category web applications if$GLOBALS'modname' != ''...
[DCA-2011-0003]: LMS Web Ensino - Multiple XSS, Session Fixation, CSRF and SQL Injection
DCA-2011-0003 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - LMS Web Ensino Vendor Product Description - Portuguese - O Learning Management System LMS Web Ensino uma ferramenta completa para o gerenciamento e oferta de cursos e treinamentos...
Lms Web Ensino - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/46829/info LMS Web Ensino is prone to the following input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities 2. An SQL-injection vulnerability 3. A cross-site request-forgery vulnerability 4. A session-fixation vulnerability...
LMS Web Ensino XSRF / XSS / SQL Injection / Session Fixation
DCA-2011-0003 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - LMS Web Ensino Vendor Product Description - Portuguese - O Learning Management System LMS Web Ensino é uma ferramenta completa para o gerenciamento e oferta de cursos e treinamentos à...
Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure
Affected products ================= Dokeos 1.8.6.1 / 2.0 Chamilo 1.8.7.1 Resume ====== Two file disclosure flaws exists on these LMS platforms, which could allow an attacker registered on the system to obtain files from the server, i.e your database configuration file, or any other file readeable...
Chamilo LMS Detection (HTTP)
HTTP based detection of Chamilo LMS. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103070";...
Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure
Exploit for php platform in category web applications Title: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure Date: 2011/01/31 Author: beford Software Link: http://www.dokeos.com/download/dokeos-1.8.6.1.zip http://chamilo.googlecode.com/files/chamilo-1.8.7.1-stable.tar.gz Affected products...
Chamilo 1.8.7 / Dokeos 1.8.6 File Disclosure
Title: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure Date: 2011/01/31 Author: beford Software Link: http://www.dokeos.com/download/dokeos-1.8.6.1.zip http://chamilo.googlecode.com/files/chamilo-1.8.7.1-stable.tar.gz Affected products ================= Dokeos 1.8.6.1 / 2.0 Chamilo 1.8.7.1...
Angel LMS Exploit
I have discovered a security exploit in Angel LMS 7.3 "Colleges and universities worldwide choose the ANGEL LMS to deliver powerful online teaching and learning experiences. ANGEL provides the comprehensive LMS features institutions need in a simple interface that promotes adoption. A recognized...
Angel LMS 7.3 Cross Site Scripting
I have discovered a security exploit in Angel LMS 7.3 "Colleges and universities worldwide choose the ANGEL LMS to deliver powerful online teaching and learning experiences. ANGEL provides the comprehensive LMS features institutions need in a simple interface that promotes adoption. A recognized...
CVE-2010-0138: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution LMS, allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol GIOP request, related to...
MULTIPLE ARBITRARY INFORMATION DISCLOSURE AND EDITION --ILIAS LMS <= 3.10.7/3.9.9-->
-------------------------------------------------------------------------------------- MULTIPLE ARBITRARY INFORMATION DISCLOSURE AND EDITION --ILIAS LMS = 3.10.7/3.9.9-- -------------------------------------------------------------------------------------- CMS INFORMATION: --WEB:...