CVE-2026-85209

The Learning Management System (LMS) developed by AVEZ Electronics Communication Training and Consultancy Trade Inc. is impacted by a Missing Authorization vulnerability (CWE-862). The root cause is incorrectly configured access control security levels , which allows for exploitation. The vulnera...

EUVD-2026-91567

Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Learning Management System LMS: through 2026-09-18...

CVE-2026-85209 IDOR in AVEZ Electronics's LMS

Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Learning Management System LMS: through 2026-09-18...

Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference

Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Unauth access to course progress.This issue affects Masteriyo - LMS: from n/a through 1.7.3. id: CVE-2024-33939 info: name: Masteriyo LMS = 1.7.3 - Insecure Direct Object Reference author:...

Academy Learning Management System <5.9.1 - Cross-Site Scripting

Academy Learning Management System before 5.9.1 contains a cross-site scripting vulnerability via the Search parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

LMS by Masteriyo < 1.6.8 - Information Exposure

The plugin does not properly safeguards sensitive user information, like other user's email addresses, making it possible for any students to leak them via some of the plugin's REST API endpoints. id: CVE-2023-3345 info: name: LMS by Masteriyo 1.6.8 - Information Exposure author: DhiyaneshDK...

CVE-2021-43129

CVE-2021-43129 D2L Brightspace 学习管理系统（LMS）中的漏洞 漏洞类型： CWE-668：将资源暴露给错误范围 产品供应商： Desire2Learn/D2L 受影响的产品代码库： D2L Brightspace 学习管理系统（LMS） 测试版本：20.21.7 D2L 宣布“禁用右键单击”设置将于 2022 年 8 月停用。 受影响的组件： 测验功能的“禁用右键单击”设置 攻击类型： 远程 权限提升影响： 是 攻击向量： 远程答题者可以从测验 URL...

CVE-2026-45140

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-45140 CVE-2026-45140 Chamilo LMS 2.0.0 — chamilo Chamilo LMS 是一个开源学习管理系统。在 2.0.1 之前，Chamilo LMS 允许未经身份验证的远程攻击者在服务器上执行任意代码。权威公告未指明受影响的端点、组件、输入或利用机制。此问题已在 2.0.1 版本中修复。 | ---|--- CVE| CVE-2026-45140 · CVE.org CWE| CWE-22, CWE-94, CWE-21...

CVE-2026-54343

Frappe LMS versions prior to 2.52.1 are affected by a path traversal vulnerability in the SCORMRenderer.render function within lms/page_renderers.py. The renderer constructs and opens a server-side file path without verifying that the resolved path remains within the public/scorm directory, allow...

CVE-2026-54343: Improper Limitation of a Pathname to a Restricted Directory

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handled by SCORMRenderer.render in lms/pagerenderers.py. The renderer constructs and opens a server-side path without first...

PT-2026-86647

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public...

CVE-2026-75151: Cross-Site Request Forgery (CSRF)

A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be initiated remotely...

EUVD-2026-54215

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file uploadfiles.php. This manipulation causes unrestricted upload. The attack may be initiated remotely...

EUVD-2026-54220

A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file viewstudents.php. Such manipulation of the argument classgroup leads to authorization bypass. The attack may be launched remotely...

CVE-2026-19065

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file uploadfiles.php. This manipulation causes unrestricted upload. The attack may be initiated remotely...

CVE-2026-19066

A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file viewstudents.php. Such manipulation of the argument classgroup leads to authorization bypass. The attack may be launched remotely...

CVE-2026-19066 SourceCodester Online Examination & Learning Management System view_students.php authorization

A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of the file viewstudents.php. Such manipulation of the argument classgroup leads to authorization bypass. The attack may be launched remotely...

CVE-2026-19065 SourceCodester Online Examination & Learning Management System upload_files.php unrestricted upload

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file uploadfiles.php. This manipulation causes unrestricted upload. The attack may be initiated remotely...

CVE-2026-19064 SourceCodester Online Examination & Learning Management System view.php authorization

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

CVE-2026-19064

The CVE-2026-19064 entry describes a vulnerability in SourceCodester Online Examination & Learning Management System 1.0 where manipulation of the ID parameter in /view.php leads to an authorization bypass. The issue is exploitable remotely and affects unknown code paths within the /view.php file...