Sql injection

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...

CVE-2009-2149

Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...

CVE-2009-2149

Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...

CVE-2009-2150

Multiple cross-site request forgery CSRF vulnerabilities in Campus Virtual-LMS allow 1 remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a ...

CVE-2009-2148

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2148

SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-2150

CVE-2009-2150 has concrete details: CSRF vulnerabilities in Campus Virtual-LMS. The issues enable remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and may also allow hijacking via ADD or DELETE actions to enrolments/step2...

CVE-2009-2149

The CVE-2009-2149 entry describes multiple cross-site scripting (XSS) vulnerabilities in Campus Virtual-LMS. Attackers can inject arbitrary web script or HTML via parameters in specific pages: (1) courseid on enrolments/step1.php and (2) search or (3) siteid on files/shared_list.php. The affected...

CVE-2009-2148

CVE-2009-2148 refers to an SQL injection vulnerability in Campus Virtual-LMS, specifically in news/index.php, exploitable via the id parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands and could lead to unauthorized access or data manipulation. Affected softw...

CVE-2009-2149

Multiple cross-site scripting XSS vulnerabilities in Campus Virtual-LMS allow remote attackers to inject arbitrary web script or HTML via the 1 courseid parameter to enrolments/step1.php, or the 2 search or 3 siteid parameter to files/sharedlist.php...

CVE-2009-2150

Multiple cross-site request forgery CSRF vulnerabilities in Campus Virtual-LMS allow 1 remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a ...

Campus Virtual-LMS (XSS/SQL Injection) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Campus Virtual-LMS XSS/SQL Injection Multiple Remote Vulnerabilities ======================================================================...

Campus Virtual-LMS XSRF / XSS / SQL Injection

+-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009 +-----------------------------------------------------------------------------+...

Campus Virtual-LMS (XSS/SQL Injection) Multiple Remote Vulnerabilities

No description provided by source. +-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009 +-----------------------------------------------------------------------------+...

campus virtual-lms - Cross-Site Scripting SQL Injection

campus virtual-lms - Cross-Site Scripting SQL Injection +-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009...

campus virtual-lms - Cross-Site Scripting / SQL Injection

+-----------------------------------------------------------------------------+ LMS: Campus Virtual-LMS WEB: http://campusvirtualcomputrade.cae.net Autor: Yasión Fecha: 12 jun 2009 +-----------------------------------------------------------------------------+...

Conficker hits University of Utah

University of Utah officials say a computer virus has infected more than 700 campus computers tech.yahoo.com, including those at the school’s three hospitals. University health sciences spokesman Chris Nelson said the outbreak of the Conficker worm, which can slow computers and steal personal...

Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference

Errata : Products listed but not affected : AVIRA WebProtector for KEN! - Reason: Does not use the Scan Engine Avira AntiVir Mobile - Reason: Does not use the same AV Engine Avira requested the following products to be removed from the list, for the reason that they are license models and not...

CVE-2008-5463

Unspecified vulnerability in the PeopleSoft Enterprise Campus Solutions component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...