CVE-2024-35171

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Academy LMS academy.This issue affects Academy LMS: from n/a through 1.9.25...

PT-2024-25545 · Unknown · Academy Lms

Name of the Vulnerable Software and Affected Versions: Academy LMS versions 1.9.16 and earlier Description: The issue is related to a Missing Authorization vulnerability in Academy LMS. Recommendations: For versions 1.9.16 and earlier, update to a version that includes a fix for this issue, as no...

WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Steven Julian Patchstack Alliance in WordPress Plugin Masteriyo - LMS versions = 1.7.2...

WordPress MasterStudy LMS plugin <= 3.3.0 - Unauthenticated Local File Inclusion via modal vulnerability

Unauthenticated Local File Inclusion via modal vulnerability discovered by Hiroho Shimada in WordPress Plugin MasterStudy LMS versions = 3.3.0...

WordPress Plugin MasterStudy LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

OpenOLAT Cross-Site Scripting Vulnerability

OpenOLAT is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a Learning Management System. A security vulnerability exists in OpenOlat LMS. An attacker exploited the vulnerability to execute stored JavaScript code in a user's browser with the privilege...

moodle security breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in moodle that stems from improperly managed access rights...

Moodle Access Control Error Vulnerability

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. An access control error vulnerability exists in the Moodle LMS that stems from insufficient access control...

WordPress Plugin LearnDash LMS Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-9608 · Oracle · Peoplesoft Enterprise Elm Enterprise Learning Management

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise ELM Enterprise Learning Management version 9.2 Description: The issue is related to a vulnerability in the authorization procedure of the Enterprise Learning Management component. This vulnerability allows a low-privileg...

Chamilo LMS Security Vulnerability

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version v1.11.24 and prior...

Chamilo LMS Security Vulnerability

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS v1.11.24 and prior versions,...

PT-2023-28301 · Unknown · Chamilo Lms

Name of the Vulnerable Software and Affected Versions: Chamilo LMS versions prior to 1.11.24 Description: The issue allows authenticated attackers with a learner role to achieve remote code execution. This is possible due to an unrestricted file upload in the /main/inc/ajax/work.ajax.php endpoint...

CVE-2022-47430

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1...

CVE-2022-47430

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1...

CVE-2022-47430

CVE-2022-47430 affects The School Management – Education & Learning Management WordPress plugin (versions ≤ 4.1). Affects the plugin via an improper neutralization of SQL elements, enabling SQL Injection. Public records in the sources note the vulnerability severity varies: NVD indicates CVSS v3....

CVE-2022-47430 WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar The School Management – Education & Learning Management allows SQL Injection.This issue affects The School Management – Education & Learning Management: from n/a through 4.1...

ILIAS Security Vulnerabilities

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS that stems from the presence of a directory traversal and local file inclusion vulnerability, which allows an attacker to gain unauthorized access to and retrieve confidential files stored on a web server...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle. No information about this vulnerability is available at this time, please stay tuned to CNN...

Frappe Learning Management System Cross-Site Scripting Vulnerability

Frappe Learning Management System is an easy to use open source learning management system from Frappe Open Source. A cross-site scripting vulnerability exists in Frappe Learning Management System. An attacker could exploit this vulnerability to perform cross-site scripting attacks...