Student-Homework-Management-System 代码注入漏洞

Student-Homework-Management-System is a student work management system developed by itning individual developers using SSM+Shiro. A code injection vulnerability exists in Student-Homework-Management-System 1.2.7 and earlier versions, which stems from a cross-site scripting attack due to incorrect...

CVE-2025-3118

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/viewcourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-3118 SourceCodester Online Tutor Portal view_course.php sql injection

A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/viewcourse.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit...

PT-2025-35788

Name of the Vulnerable Software and Affected Versions Chamilo LMS versions prior to 1.11.30 Description The Chamilo LMS system has an issue due to inadequate validation of XML object sequences. Successful exploitation could allow a remote attacker to execute arbitrary SQL queries. The application...

Engaging Online Learning: Strategies to Keep Students Focused and Motivated

While inundated with ideas, you also need to consider how to present them effectively and structure the course…...

CVE-2025-2662

A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown function of the file student/studentdashboard.php. The manipulation of the argument course leads to sql injection. It is possible to launch the attack remotely...

Projectworlds Online Time Table Generator 注入漏洞

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. An injection vulnerability exists in Projectworlds Online Time Table Generator version 1.0, which stems from the fact that incorrect manipulation of the parameter course can lead to SQL injection...

Moodle has a SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

SQL Injection

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to SQL Injection through the module list filter within course search. Remediation Upgrade moodle/moodle to version 4.1.16, 4.3.10, 4.4.6, 4.5.2 or higher. References - Git Commit - Moodle Forum Credit:...

GHSA-RG56-94J7-HJX9 Moodle has a SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

CVE-2025-26533

An SQL injection risk was identified in the module list filter within course search...

UBUNTU-CVE-2025-26533

An SQL injection risk was identified in the module list filter within course search...

CVE-2025-26533

CVE-2025-26533 describes an SQL injection risk in Moodle’s course search module list filter. Affected: Moodle LMS; component: module list filter in the course search. Root cause: insufficient input filtering in the filter used by course search. Impact: high to critical according to metrics in the...

CVE-2025-26533 SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

CVE-2025-26533 SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

CVE-2025-26533 SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

CVE-2024-13672

The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mcg' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-13672

The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mcg' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-13672 Mini Course Generator | Embed mini-courses and interactive content <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Mini Course Generator | Embed mini-courses and interactive content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mcg' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-13672

CVE-2024-13672 pertains to the WordPress plugin “Mini Course Generator” and enables Stored Cross-Site Scripting via the mcg shortcode on affected pages. The issue affects versions up to 1.0.5 and arises from insufficient input sanitization and output escaping for user-supplied attributes, enablin...