2291 matches found
CVE-2020-12429
Online Course Registration 2.0 is affected by multiple SQL injection vulnerabilities that can lead to complete database compromise and authentication bypass on login pages such as admin/change-password.php, admin/check_availability.php, admin/index.php, change-password.php, check_availability.php...
Online Course Registration 2.0 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Authentication Bypass Exploit Author: Daniel Monzón stark0de Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: 2.0...
Logic Flaw Vulnerability in the Course Center System of Shanghai Excellence Ruixin Digital Technology Co.
Curriculum Center System is a teaching and learning system specially developed by Shanghai Excellence Ruixin Digital Technology Co. for teaching in colleges and universities. A logic flaw exists in the Shanghai Excellence Ruixin Digital Technology Co., Ltd Course Center System, which can be...
Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery (Add User)
Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery Add User Exploit Title: Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery Add User Date: 2020-01-30 Vendor Homepage: https://www.themeum.com/product/tutor-lms/ Vendor Changelog: https://wordpress.org/plugins/tutor/developer...
CVE-2020-9337
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
CVE-2020-9337
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
CVE-2020-9337
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
CVE-2020-9337
CVE-2020-9337 affects GolfBuddy Course Manager 1.1, where passwords are transmitted via a GET request using base64 encoding. This exposes confidential data because base64 is not encryption and GET parameters can be logged or exposed in browser history and server logs. NVD CVSS3.1 vector CVSS:3.1/...
CVE-2020-9337
In GolfBuddy Course Manager 1.1, passwords are sent with base64 encoding via a GET request...
Deal: Cloud And Networking Certification Training ~ Get 97% OFF
Cloud computing and networking are two of the most significant areas of growth in the IT business. Companies need engineers who can maintain distributed software and keep the company connected. If you want to work in either niche, the Essential Cloud & Networking Certification Training Bundle...
Moodle Information Disclosure Vulnerability (CNVD-2020-10127)
Moodle is a learning platform designed to provide educators, administrators, and learners with a powerful, secure, and integrated system for creating personalized learning environments. An information disclosure vulnerability exists in Moodle versions prior to 3.7.2. An attacker could exploit the...
CVE-2020-1692
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...
UBUNTU-CVE-2020-1692
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...
Information disclosure
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...
CVE-2020-1692
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...
Opencast < 7.6.0 and 8.0.0 Multiple Vulnerabilities
Opencast is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GHSA-94QW-R73X-J7HG Users with ROLE_COURSE_ADMIN can create new users in Opencast
Impact Users with the role ROLECOURSEADMIN can use the user-utils endpoint to create new users not including the role ROLEADMIN. For example: bash Use the admin to create a new user with ROLECOURSEADMIN using the admin user. We expect this to work. % curl -i -u admin:opencast...
trainingcourseexperts.wa.edu.au Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1075616 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Semrush: IDOR in semrush academy
INTRODUCTION I used two accounts to search for this vulnerability: - id: 5410425 email: ████[email protected] - id: 5407773 email: ████@anosimple.com IP used: ███ Endpoint URL: https://www.semrush.com/academy/courses/userEnroll EXPLOITATION Description of Security Issue: When a user clicks on the...
Online Course Registration 2.0 - Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0...