34 matches found
CVE-2019-20512
Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...
CVE-2019-20512
Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...
CVE-2019-20512: Improper Neutralization of Input During Web Page Generation
Open edX Ironwood.1 allows support/certificates?courseid= reflected XSS...
CVE-2010-2908: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Joomdle comjoomdle component 0.24 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the courseid parameter in a detail action to index.php...
Sql injection
SQL injection vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to execute arbitrary SQL commands via the courseid parameter...
CVE-2010-2354
SQL injection vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to execute arbitrary SQL commands via the courseid parameter...
CVE-2010-2356: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the courseid parameter...
CVE-2010-2354: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in subscribe.php in Pilot Group PG eLMS Pro allows remote attackers to execute arbitrary SQL commands via the courseid parameter...
CVE-2009-4883: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in PHPRecipeBook 2.24 and 2.39 allows remote attackers to execute arbitrary SQL commands via the 1 baseid or 2 courseid parameter in a search action...
Sql injection
SQL injection vulnerability in searchresult.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the courseID parameter...
CVE-2010-0954
SQL injection vulnerability in searchresult.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the courseID parameter...
CVE-2010-0954: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in searchresult.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the courseID parameter...
CVE-2002-1007
Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via 1 the courseid parameter in a link to login.pl, 2 the CTID parameter in ProcessInfo.cgi, or 3 the Message parameter in index.cgi...
CVE-2002-1007: Undefined Security Weakness
Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via 1 the courseid parameter in a link to login.pl, 2 the CTID parameter in ProcessInfo.cgi, or 3 the Message parameter in index.cgi...