forma.lms Detection (HTTP)

Checks whether Forma Learning Management System is present on the target system and if so, tries to figure out the installed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under th...

Forma Learning Management System SQL Injection Vulnerability (CNVD-2019-44282)

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...

Forma Learning Management System SQL Injection Vulnerability (CNVD-2020-02570)

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...

Forma Learning Management System SQL Injection Vulnerability (CNVD-2019-44281)

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...

Forma Learning Management System SQL Injection Vulnerability

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker could exploit this vulnerability by sending a specially crafted web request to disclose database user credentials and access the...

Vulnerability Spotlight: SQL injection vulnerabilities in Forma Learning Management System

Yuri Kramarz of Security Advisory EMEAR discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered three SQL injection vulnerabilities in the authenticated portion of the Formal Learning Management System. LMS is a set of software that allows companies to build and hos...

Unspecified vulnerability in Moodle (CNVD-2019-43889)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that can be exploited by attackers to bypass security restrictions and perform unauthorized...

Moodle Injection Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. An injection vulnerability exists in Moodle, which can be exploited by an attacker to inject scripts...

CVE-2019-2707

Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products subcomponent: Application Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2700

Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products subcomponent: Enterprise Learning Mgmt. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2707

Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products subcomponent: Application Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2707

Vulnerability in the PeopleSoft Enterprise ELM Enterprise Learning Management component of Oracle PeopleSoft Products subcomponent: Application Search. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2019-2707

CVE-2019-2707 affects Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise ELM (Enterprise Learning Management) component, subcomponent Application Search, version 9.2. The issue is exploitable by an unauthenticated attacker over HTTP with network access. Attacks require user intera...

Oracle PeopleSoft Products PeopleSoft Enterprise ELM Component Access Control Error Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation Oracle. The products provide human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise ELM is one of the enterprise employee learning...

Vulnerabilities in the Frontend of IM-Learning Intelligent Learning Management System of Guangyi Orient

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. An override access vulnerability exists in the frontend of the Guangyi Orient IM-Learning Intelligent Learning Management System, which can be exploited by an...

XSS Vulnerability in IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. An XSS vulnerability exists in the Guangyi East IM-Learning Intelligent Learning Management System, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Frontend of IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. A SQL injection vulnerability exists in the frontend of the IM-Learning Intelligent Learning Management System in Guangyi East. An attacker can exploit this...

Arbitrary File Upload Vulnerability in IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. An arbitrary file upload vulnerability exists in the Guangyi East IM-Learning Intelligent Learning Management System. An attacker can exploit the vulnerability to...

ILIAS cross-site scripting vulnerability (CNVD-2018-10487)

ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS versions prior to 5.1.26, 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.4. A remote...

PHP Scripts Mall Learning and Examination Management System Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Learning and Examination Management System Script is an online learning and examination management system from PHP Scripts Mall India. The system is mainly used for online exams and online quizzes. A cross-site scripting vulnerability exists in PHP Scripts Mall Learning and...