Cross site request forgery (csrf)

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

CVE-2023-6766 PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

CVE-2023-6766 PHPGurukul Teacher Subject Allocation Management System Delete Course course.php cross-site request forgery

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/course.php of the component Delete Course Handler. The manipulation of the argument delid leads to cross-site request forgery...

PT-2023-32767 · Unknown · Phpgurukul Teacher Subject Allocation Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teacher Subject Allocation Management System version 1.0 Description: A problematic vulnerability has been found in the PHPGurukul Teacher Subject Allocation Management System. The issue affects an unknown function of the file...

Teacher Subject Allocation Management System Cross-Site Request Forgery Vulnerability

Teacher Subject Allocation Management System is a Teacher Subject Allocation Management System. A cross-site request forgery vulnerability exists in version 1.0 of the PHPGurukul Teacher Subject Allocation Management System, which stems from the parameter delid in the file /admin/course.php that...

PT-2023-29801 · WordPress · Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Namaste! LMS plugin for WordPress versions up to, and including, 2.6.1.1 Description: The issue arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts via the course...

VulnCheck KEV: CVE-2022-28079

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the coursecode parameter...

ILIAS < 7.24, 8.x < 8.4 Multiple Vulnerabilities

ILIAS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ilias:ilias"; if description...

GHSA-9GQP-3G28-W9XC Moodle Cross-site Scripting vulnerability

The course upload preview contained an XSS risk for users uploading unsafe data...

Moodle Cross-site Scripting vulnerability

The course upload preview contained an XSS risk for users uploading unsafe data...

CVE-2023-5547

The course upload preview contained an XSS risk for users uploading unsafe data...

CVE-2023-5547

The course upload preview contained an XSS risk for users uploading unsafe data...

CVE-2023-5540

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...

UBUNTU-CVE-2023-5547

The course upload preview contained an XSS risk for users uploading unsafe data...

CVE-2023-5547

The course upload preview contained an XSS risk for users uploading unsafe data...

CVE-2023-5549 Moodle: insufficient capability checks when updating the parent of a course category

Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage...

CVE-2023-5547

CVE-2023-5547 concerns Moodle: a cross-site scripting (XSS) risk in the course upload preview when users upload unsafe data. The OSV and GitHub advisories explicitly describe the XSS issue. No public details on affected versions, root cause specifics, exploit status, or available patches are prov...

CVE-2023-5547 Moodle: xss risk when previewing data in course upload tool

The course upload preview contained an XSS risk for users uploading unsafe data...

CVE-2023-5547 Moodle: xss risk when previewing data in course upload tool

The course upload preview contained an XSS risk for users uploading unsafe data...

PT-2023-8911 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to an XSS risk in the course upload preview, which can be exploited when users upload unsafe data. This can allow a remote attacker to perform cross-site scripting...