PT-2018-13805

Name of the Vulnerable Software and Affected Versions Wisetail Learning Ecosystem LE versions through 4.11.6 Description The issue allows for insecure direct object reference IDOR attacks, enabling access to non-purchased course contents, such as quizzes or tests, by modifying the id parameter...

PT-2018-13804

Name of the Vulnerable Software and Affected Versions Wisetail Learning Ecosystem LE versions through 4.11.6 Description The issue allows for insecure direct object reference IDOR attacks, enabling the download of non-purchased course files. This is achieved by modifying the id parameter in a...

CVE-2018-16971: Authorization Bypass Through User-Controlled Key

Wisetail Learning Ecosystem LE through v4.11.6 allows insecure direct object reference IDOR attacks to access non-purchased course contents quiz / test via a modified id parameter...

CVE-2018-16970: Insertion of Sensitive Information into Externally-Accessible File or Directory

Wisetail Learning Ecosystem LE through v4.11.6 allows insecure direct object reference IDOR attacks to download non-purchased course files via a modified id parameter...