ATutor 2.2.2 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana Kuma...

ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course)

Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana Kumar Contact: https://facebook.com/06saravanakumar...

Learning Management System 0.1 - Authentication Bypass

Learning Management System 0.1 - Authentication Bypass Exploit Title.............. Learning Management System Auth Bypass Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage...

eFront Learning CMS Cross-Site Scripting Vulnerability (CNVD-2016-03584)

eFront is an online learning system. A cross-site scripting vulnerability exists in eFront. Because the program fails to properly filter user-supplied input, an attacker can exploit the vulnerability to steal cookie-based authentication information and execute arbitrary script in the browser...

The vulnerabilities in the Moodle learning management system allow a hacker to inject arbitrary Web or HTML code.

Multiple vulnerabilities exist in the Moodle learning management system module, due to the lack of measures taken to protect the website structure. Exploitation of these vulnerabilities allows attackers to inject arbitrary Web or HTML code, through the use of the “student” role and a specially...

eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability

Document Title: =============== eFront Learning 3.6.15.6 CMS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-22 Vulnerability Laboratory ID VL-ID: ===================================...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Learning Management OTA Self Service Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Learning Management OTA Self Service component, which could be exploited by a remote attacker to submit a special request to modify data...

CVE-2016-0575

Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to OTA Self Service...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to OTA Self Service...

CVE-2016-0575: Undefined Security Weakness

Unspecified vulnerability in the Oracle Learning Management component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect integrity via vectors related to OTA Self Service...

PT-2016-4326

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite version 11.5.10.2 Description The issue affects the integrity of the system, related to the Oracle Learning Management component. It can be exploited remotely via vectors related to OTA Self Service. Recommendations For...

Moodle Security Bypass Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Moodle Security Bypass Vulnerability (CNVD-2015-07117)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

New for universal E-learning Management System SQL injection vulnerability-vulnerability warning-the black bar safety net

New for software E-learning Management System,using the enterprise pretty much Website parts list: Business: http://www.newv.com.cn/caseenterprise.html Education: http://www.newv.com.cn/casecollege.html Government: http://www.newv.com.cn/casegovernment.html The problem mainly shows in:...

The vulnerability of the Moodle learning management system allows a perpetrator to gain access to protected information.

The vulnerability of the sub-component “tool/monitor subscribe” in the Moodle learning management system is related to code errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information due to errors in the subscription process...

The vulnerability of the Moodle learning management system allows a perpetrator to gain access to protected information.

The vulnerability of the Moodle library component lib/moodlelib.php in the Moodle learning management system is related to errors in the code. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Forma LMS 1.3 - Multiple SQL Injections

Forma LMS 1.3 - Multiple SQL Injections Forma LMS 1.3 Multiple SQL Injections + Author: Filippo Roncari + Target: Forma LMS + Version: 1.3 and probably lower + Vendor: http://www.formalms.org + Accessibility: Remote + Severity: High + CVE: + Full Advisory:...

Forma LMS 1.3 - Multiple SQL Injections

Forma LMS 1.3 Multiple SQL Injections + Author: Filippo Roncari + Target: Forma LMS + Version: 1.3 and probably lower + Vendor: http://www.formalms.org + Accessibility: Remote + Severity: High + CVE: + Full Advisory: https://www.securenetwork.it/docs/advisory/SN-15-03Formalms.pdf + Info:...

eFront 3.6.15 - PHP Object Injection

eFront 3.6.15 - PHP Object Injection eFront 3.6.15 PHP Object Injection Vulnerability + Author: Filippo Roncari + Target: eFront + Version: 3.6.15 and probably lower + Vendor: www.efrontlearning.net + Accessibility: Remote + Severity: High + CVE: + Full Advisory:...

eFront 3.6.15 - Multiple SQL Injections

eFront 3.6.15 - Multiple SQL Injections eFront 3.6.15 Multiple SQL Injection Vulnerabilities + Author: Filippo Roncari | Luca De Fulgentis + Target: eFront + Version: 3.6.15 and probably lower + Vendor: www.efrontlearning.net + Accessibility: Remote + Severity: High + CVE: + Full Advisory:...