Lucene search
+L

4 matches found

NVD
NVD
added 2021/04/05 7:15 p.m.12 views

CVE-2021-24182

The tutorquizbuildergetanswersbyquestion AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students...

6.5CVSS0.01742EPSS
Exploits2References2
CVE
CVE
added 2021/04/05 6:27 p.m.51 views

CVE-2021-24182

CVE-2021-24182 affects the Tutor LMS WordPress plugin prior to 1.8.3. The flaw is a UNION-based SQL injection in the AJAX action tutor_quiz_builder_get_answers_by_question, exploitable by students. The vulnerability stems from unsafely constructed SQL in the affected function, enabling unauthoriz...

6.5CVSS6.8AI score0.01742EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2021/04/05 6:27 p.m.28 views

CVE-2021-24182 Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question

The tutorquizbuildergetanswersbyquestion AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students...

7.1AI score0.01742EPSS
Exploits2References2
VulnCheck KEV
VulnCheck KEV
added 2021/03/15 12:0 a.m.4 views

VulnCheck KEV: CVE-2021-24182

The tutorquizbuildergetanswersbyquestion AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students...

6.5CVSS6.7AI score0.01742EPSS
Exploits2References1
Rows per page
Query Builder