Lucene search
K

29 matches found

Cvelist
Cvelist
added 2023/11/28 7:15 a.m.12 views

CVE-2023-4222 Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

Command injection in main/lp/openofficetextdocument.class.php in Chamilo LMS = v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters...

7.2CVSS9.4AI score0.01863EPSS
Exploits2References4
OSV
OSV
added 2021/06/23 4:47 p.m.2 views

DRUPAL-CONTRIB-2021-018

This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the differents steps of a training in Opigno LMS. The module does not set X-Frame-Options and blocks ability of other modules e.g Security Kit to add them, leaving it...

6.8AI score
Exploits0References1
Drupal
Drupal
added 2021/06/23 12:0 a.m.20 views

Opigno Learning path - Less critical - UI redressing (clickjacking) - SA-CONTRIB-2021-018

This project is related to Opigno LMS distribution. It implements the learning path, that combines together in a very flexible way the differents steps of a training in Opigno LMS. The module does not set X-Frame-Options and blocks ability of other modules e.g Security Kit to add them, leaving it...

6.5AI score
Exploits0References7
OSV
OSV
added 2019/05/15 5:9 p.m.2 views

DRUPAL-CONTRIB-2019-047

In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not...

6.8AI score
Exploits0References1
Drupal
Drupal
added 2019/05/15 12:0 a.m.14 views

Opigno Learning path - Moderately critical - Access bypass - SA-CONTRIB-2019-047

In certain configuration cases, when a learning path is configured as semi-private, anonymous users are allowed to join a learning path when they should not...

6.6AI score
Exploits0References6
The Hacker News
The Hacker News
added 2018/10/08 1:1 p.m.245 views

How to Start a Career in Cybersecurity: All You Need to Know

Cybersecurity is one of the most dynamic and exciting fields in tech, combining cutting-edge information technology with crime fighting. It's also an industry in serious need of qualified professionals. Estimates show that there are over one million unfilled cybersecurity jobs. The U.S. Bureau of...

6.7AI score
Exploits0
The Coalfire Blog
The Coalfire Blog
added 2018/05/16 8:36 p.m.12 views

AWS Certified Cloud Practitioner: A Valuable Certification for Professionals in Non-Technical Roles

Within the past year, AWS unveiled what is arguably one of the best programs they have ever offered to non-technical professionals in the AWS Partner Network APN: the AWS Certified Cloud Practitioner certification. The program, which is especially valuable for those in sales or marketing roles,...

3.7AI score
Exploits0
NVD
NVD
added 2008/07/25 4:41 p.m.9 views

CVE-2008-3315

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

4.3CVSS5.6AI score0.02789EPSS
Exploits1References8
Cvelist
Cvelist
added 2008/07/25 4:0 p.m.16 views

CVE-2008-3315

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

5.6AI score0.02789EPSS
Exploits1References8
Rows per page
Query Builder