Improper access control

PreProjects Pre E-Learning Portal stores dbelearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

CVE-2008-6052

PreProjects Pre E-Learning Portal stores dbelearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

CVE-2008-6052

The CVE-2008-6052 entry concerns the PreProjects Pre E-Learning Portal, where the web root improperly stores the database file db_elearning.mdb, leading to insufficient access control. This exposure can allow remote attackers to directly request the database and obtain passwords. The available so...

CVE-2008-6052: Undefined Security Weakness

PreProjects Pre E-Learning Portal stores dbelearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

[SECURITY] Fedora 9 Update: moodle-1.9.3-5.fc9

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Windows/x86 (XP SP3) (Turkish) - cmd.exe Shellcode (52 bytes)

Windows/x86 XP SP3 Turkish - cmd.exe Shellcode 52 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF Title : win32/xp sp3 Tr cmd.exe Shellcode 52 bytes Proof : http://img59.imageshack.us/img59/6499/proofc.png Author : ZoRLu / http://inj3ct0r.com/author/577 mail-msn :...

ILIAS 3.7.4 Blind SQL Injection

ILIAS Learning Management 50--...

ILIAS 3.7.4 - ref_id Blind SQL Injection

ILIAS 3.7.4 - refid Blind SQL Injection ILIAS Learning Management 50-- milw0rm.com 2008-12-24...

ILIAS 3.7.4 - 'ref_id' Blind SQL Injection

ILIAS Learning Management 50-- milw0rm.com 2008-12-24...

ILIAS <= 3.7.4 (ref_id) Blind SQL Injection Vulnerability

No description provided by source. ILIAS Learning Management = 3.7.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 24.12.2008 Developer: http://www.ilias.de Dork 1: "powered by ILIAS" Dor...

ILIAS <= 3.7.4 (ref_id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= ILIAS 50-- 0day.today 2018-03-20...

E-Learning Portal File Upload

E-Learning Portal Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com D-Unit: ZoRLu & SuB-ZeRo N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

RoundCube Webmail <= 0.2b Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================= RoundCube Webmail echoiniget'disablefunctions'; exec, system PHP passthru"id; uname -a"; uid=666www-data gid=666www-data groups=666www-data Linux mail 2.6.28 0 Sun Jan 01 10:05:33 CET...

Pre E-Learning Portal Database Disclosure

--------------------------------------------------------- Portal Name: Pre E-Learning Portal Vendor : http://preproject.com/elearning.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

[SECURITY] Fedora 10 Update: moodle-1.9.3-3.fc10

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 9 Update: moodle-1.9.3-3.fc9

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Docebo GLOBALS Variable Overwrite Vulnerability (Aug 2008)

Docebo is prone to vulnerable remote and local file inclusion vulnerabilities. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Original...

CVE-2008-3384

CVE-2008-3384 affects Interact Learning Community Environment Interact 2.4.1. Multiple directory traversal vulnerabilities in help/help.php allow remote attackers to include and execute arbitrary local files via a .. in the (1) module and (2) file parameters. The NVD entry notes a CVSS v2 base sc...

CVE-2008-3363

Directory traversal vulnerability in userportal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the include parameter...

CVE-2008-3363

Affected software: Dokeos E-Learning System 1.8.5 (Windows). Vulnerable component: user_portal.php; issue: directory traversal leading to local file inclusion in include parameter. Root cause: insufficient sanitization of user input. Impact (as stated): remote attacker can view local files or exe...