PT-2024-25749 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue has been identified, affecting the file admin/activatestud.php. The manipulation of the selector argument leads to SQL injection. This issue can be exploited remotely...

PT-2024-25735 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the software, affecting some unknown functionality of the file admin/saveedit.php. The manipulation of the id argument leads to sql injection. The attack...

PT-2024-25723 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue was found in the admin/editt.php file, where the manipulation of the id argument leads to SQL injection. The attack can be initiated remotely. Recommendations: For...

PT-2024-25778 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue has been found in the software, affecting the file edit.php. The manipulation of the id argument leads to cross-site scripting. The attack can be initiated remotely...

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates in the selector parameter of the admin/deactivatestud.php file and can be exploited for SQL injection attacks...

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from a SQL injection attack in the selector parameter of the admin/activateteach.php file...

CVE-2024-3425: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0. Affected by this vulnerability is an unknown functionality of the file admin/activateall.php. The manipulation of the argument selector leads to sql injection. The attack can be launched remotely. The exploi...

PT-2024-25774 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A problematic issue has been found in the file editt.php, where the manipulation of the id argument leads to cross-site scripting. The attack can be launched remotely. Recommendations:...

PT-2024-25757 · Sourcecodester · Sourcecodester Online Courseware

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Courseware version 1.0 Description: A critical issue affects the processing of the file admin/activateteach.php, where the manipulation of the selector argument leads to SQL injection. The attack can be initiated remotel...

CVE-2024-3417: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Courseware 1.0. This issue affects some unknown processing of the file admin/saveeditt.php. The manipulation of the argument contact leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2024-3423: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Courseware 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin/activateteach.php. The manipulation of the argument selector leads to sql injection. The attack may be initiated remotely. The exploit has...

SQL Injection Vulnerability in PowerCreator

PowerCreator is a courseware creation tool that combines screen grabbing software, high compression algorithms, and recorded courseware. PowerCreator suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Courseware Sub-component Oracle E-Business Suite Unauthorized Access

The vulnerability of the Courseware sub-component of the Oracle Quoting component in the Oracle E-Business Suite system’s enterprise automation activity system is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the...

CVE-2021-2268

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Courseware. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of th...

CVE-2021-2268

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Courseware. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of th...

Design/Logic Flaw

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Courseware. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of th...

CVE-2021-2268

CVE-2021-2268 affects Oracle E-Business Suite, Oracle Quoting Courseware (versions 12.1.1–12.1.3). The vulnerability allows a low-privilege, network-accessible attacker over HTTP to compromise Oracle Quoting, potentially leading to unauthorized creation, deletion, or modification of data or acces...

CVE-2021-2268

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Courseware. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of th...

CVE-2021-2268: Undefined Security Weakness

Vulnerability in the Oracle Quoting product of Oracle E-Business Suite component: Courseware. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of th...

PT-2021-2935

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to errors in the code of the Courseware subcomponent of the Oracle Quoting product in Oracle E-Business Suite. It allows a low-privileged attacker with...