Lucene search
+L

2165 matches found

0daydb
0daydb
added 2020/06/07 12:50 p.m.96 views

Online Course Registration 1.0 - SQL Injection

Online Course Registration version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Online Course Registration 1.0 - Authentication Bypass Google Dork: N/A Date: 2020-06-05 Exploit Author: BKpatron Vendor Homepage:...

8.7AI score
SaveExploits0
Packet Storm
Packet Storm
added 2020/06/05 12:0 a.m.316 views

Online Course Registration 1.0 SQL Injection

Exploit Title: Online Course Registration 1.0 - Authentication Bypass Google Dork: N/A Date: 2020-06-05 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14251/online-course-registration.html Software Link:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/06/05 12:0 a.m.481 views

Online Course Registration 1.0 - Authentication Bypass

Exploit Title: Online Course Registration 1.0 - Authentication Bypass Google Dork: N/A Date: 2020-06-05 Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14251/online-course-registration.html Software Link:...

5.3AI score
SaveExploits0
CNVD
CNVD
added 2020/06/02 12:0 a.m.5 views

SQL Injection Vulnerability in University Worry-Free Online Course Selection System

School Worry-Free Online Course Selection System is designed to solve the problem of cumbersome work brought about by students' independent course selection by selecting courses online and completing personal course selection information, replacing the manual operation with paper. The system is...

7.7AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/05/29 12:0 a.m.13 views

Fedora: Security Advisory for moodle (FEDORA-2020-a1b4d24680)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.7AI score0.03083EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2020/05/25 12:30 p.m.80 views

Game-based learning platform provides full immersion into cybersecurity

Working and learning have gone remote, and we have to come to terms with this new reality. Nowadays, several organizations allow their staff to work from home permanently. Most universities consider reducing classroom time wherever possible, and now we are seeing the demand for online courses sky...

7.3AI score
SaveExploits0
Fedora
Fedora
added 2020/05/20 3:48 a.m.41 views

[SECURITY] Fedora 30 Update: moodle-3.6.10-1.fc30

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

8.8CVSS1.9AI score0.03083EPSS
SaveExploits0
Fedora
Fedora
added 2020/05/20 3:16 a.m.28 views

[SECURITY] Fedora 31 Update: moodle-3.7.6-1.fc31

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

8.8CVSS1.9AI score0.03083EPSS
SaveExploits0
NVD
NVD
added 2020/05/18 7:15 p.m.17 views

CVE-2020-13146

Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in CourseInstructorCohorts may contain a formula that is exported via the "CourseData DownloadsReportsDownload profile info" feature...

8.8CVSS8.8AI score0.0109EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/05/18 12:0 a.m.4 views

Submitty Input Validation Error Vulnerability

Submitty is an open source course management system . The system supports course management , assignment submission , exams and grading system and other functions . An input validation error vulnerability exists in the login page in Submitty versions 20.04.01 and earlier. The vulnerability stems...

6.1CVSS7AI score0.02956EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2020/05/18 12:0 a.m.164 views

Forma.LMS The E-Learning Suite 2.3.0.2 Cross Site Scripting

Exploit Title: forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting Date: 2020-05-15 Exploit Author: Daniel Ortiz Vendor Homepage: https://sourceforge.net/projects/forma/ Software link: https://sourceforge.net/projects/forma/files/latest/download Tested on: XAMPP for Linux 64b...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/04/29 12:0 a.m.4 views

Online Course Registration SQL Injection Vulnerability

Online Course Registration is a PHP and MySQL based online course registration system from the PHPGurukul team. A SQL injection vulnerability exists in the login page of Online Course Registration version 2.0. An attacker can exploit this vulnerability to bypass authentication. Login pages includ...

9.8CVSS8AI score0.02447EPSS
SaveExploits1
NVD
NVD
added 2020/04/28 8:15 p.m.20 views

CVE-2020-12429

Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/checkavailability.php, admin/index.php, change-password.php, checkavailability.php, includes/header.php,...

9.8CVSS9.8AI score0.02447EPSS
SaveExploits1References1
OSV
OSV
added 2020/04/28 8:15 p.m.6 views

CVE-2020-12429

Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/checkavailability.php, admin/index.php, change-password.php, checkavailability.php, includes/header.php,...

9.8CVSS7.3AI score0.02447EPSS
SaveExploits1References1
CVE
CVE
added 2020/04/28 7:2 p.m.76 views

CVE-2020-12429

Online Course Registration 2.0 is affected by multiple SQL injection vulnerabilities that can lead to complete database compromise and authentication bypass on login pages such as admin/change-password.php, admin/check_availability.php, admin/index.php, change-password.php, check_availability.php...

9.8CVSS9.7AI score0.02447EPSS
SaveExploits1References1Affected Software1
0day.today
0day.today
added 2020/04/27 12:0 a.m.34 views

Online Course Registration 2.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Authentication Bypass Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: 2.0...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/03/30 12:0 a.m.3 views

Logic Flaw Vulnerability in the Course Center System of Shanghai Excellence Ruixin Digital Technology Co.

Curriculum Center System is a teaching and learning system specially developed by Shanghai Excellence Ruixin Digital Technology Co. for teaching in colleges and universities. A logic flaw exists in the Shanghai Excellence Ruixin Digital Technology Co., Ltd Course Center System, which can be...

7AI score
SaveExploits0
exploitpack
exploitpack
added 2020/03/02 12:0 a.m.108 views

Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)

Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery Add User Exploit Title: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery Add User Date: 2020-01-30 Vendor Homepage: https://www.themeum.com/product/tutor-lms/ Vendor Changelog: https://wordpress.org/plugins/tutor/developer...

2.6CVSS0.2AI score0.0883EPSS
SaveExploits6
NVD
NVD
added 2020/02/26 2:15 p.m.21 views

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

6.5CVSS6.5AI score0.00541EPSS
SaveExploits0References2
OSV
OSV
added 2020/02/26 2:15 p.m.4 views

CVE-2020-9337

In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...

6.5CVSS6.6AI score0.00541EPSS
SaveExploits0References2
Rows per page
Query Builder