Lucene search
+L

857 matches found

Exploit DB
Exploit DB
•added 2021/01/05 12:00 a.m.•381 views

Responsive E-Learning System 1.0 - 'id' Sql Injection

Exploit Title: Responsive E-Learning System 1.0 – 'id' Sql Injection Date: 2020-12-24 Exploit Author: Kshitiz Rajmanitorpotterk Vendor Homepage: https://www.sourcecodester.com/php/5172/responsive-e-learning-system.html Software Link:...

5.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2020/12/28 7:15 a.m.•14 views

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

7.5CVSS7.2AI score0.0122EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/28 7:15 a.m.•34 views

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

7.5CVSS7.6AI score0.0122EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/12/28 6:23 a.m.•36 views

CVE-2020-28094

On Tenda AC1200 Model AC6 15.03.06.51multi devices, the default settings for the router speed test contain links to download malware named elive or CNKI E-Learning...

7.6AI score0.0122EPSS
SaveExploits1References1
CVE
CVE
•added 2020/12/28 6:23 a.m.•102 views

CVE-2020-28094

CVE-2020-28094 affects the Tenda AC1200 (Model AC6) with firmware 15.03.06.51_multi. The root cause is that the default router speed-test settings contain links to download malware named elive or CNKI E-Learning, which could lead to malware download without user intent. According to NVD, the vuln...

7.5CVSS7.5AI score0.0122EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/12/28 12:00 a.m.•4 views

PT-2020-16925

Name of the Vulnerable Software and Affected Versions Tenda AC1200 Model AC6 version 15.03.06.51 multi Description The default settings for the router speed test on the affected device contain links to download malware named elive or CNKI E-Learning. Recommendations For Tenda AC1200 Model AC6...

7.5CVSS0.0122EPSS
SaveExploits1References5
CNVD
CNVD
•added 2020/12/18 12:00 a.m.•16 views

Logic flaws exist in the public service platform for continuing education of professional and technical personnel of Beijing EdiKosen Education Technology Co.

Ltd. is a national high-tech enterprise. The company is committed to the development of e-learning platforms and the integration and production of curriculum resources. It strictly implements the ISO9001 international quality standard, owns 35 software copyrights, and has been awarded by the...

7AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•80 views

Moodle Access Control Error Vulnerability (CNVD-2021-28739)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which stems from the fact that a user typically a course administrator with "logged in as"...

8.8CVSS6.5AI score0.0132EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•24 views

Moodle Cross-Site Scripting Vulnerability (CNVD-2021-28740)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site scripting vulnerability that stems from a filter requiring additional cleanup to prevent the risk of...

6.1CVSS6AI score0.00984EPSS
SaveExploits0References1
zdt
zdt
•added 2020/07/01 12:00 a.m.•195 views

e-learning Php Script 0.1.0 - (search) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: e-learning Php Script 0.1.0 - 'search' SQL Injection Exploit Author: KeopssGroup0day,Inc Vendor Homepage: https://github.com/amitkolloldey/elearning-script Software Link: https://github.com/amitkolloldey/elearning-script Version...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/07/01 12:00 a.m.•153 views

e-learning PHP Script 0.1.0 SQL Injection

Exploit Title: e-learning Php Script 0.1.0 - 'search' SQL Injection Date: 2020-06-29 Exploit Author: KeopssGroup0day,Inc Vendor Homepage: https://github.com/amitkolloldey/elearning-script Software Link: https://github.com/amitkolloldey/elearning-script Version: 0.1.0 Tested on: Kali Linux Source...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/07/01 12:00 a.m.•228 views

e-learning Php Script 0.1.0 - 'search' SQL Injection

Exploit Title: e-learning Php Script 0.1.0 - 'search' SQL Injection Date: 2020-06-29 Exploit Author: KeopssGroup0day,Inc Vendor Homepage: https://github.com/amitkolloldey/elearning-script Software Link: https://github.com/amitkolloldey/elearning-script Version: 0.1.0 Tested on: Kali Linux Source...

5.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2020/06/22 6:15 p.m.•16 views

CVE-2020-14972

Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...

9.8CVSS7.5AI score0.06022EPSS
SaveExploits1References2
NVD
NVD
•added 2020/06/22 6:15 p.m.•27 views

CVE-2020-14972

Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...

9.8CVSS0.06022EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/06/22 5:21 p.m.•31 views

CVE-2020-14972

Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...

10AI score0.06022EPSS
SaveExploits1References2
CVE
CVE
•added 2020/06/22 5:21 p.m.•52 views

CVE-2020-14972

CVE-2020-14972 affects Sourcecodester Pisay Online E-Learning System 1.0. Connected sources describe multiple SQL injection vulnerabilities in the admin login-portal and the edit-lessons pages that allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution (...

9.8CVSS10AI score0.06022EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/06/22 12:00 a.m.•4 views

PT-2020-14098

Name of the Vulnerable Software and Affected Versions Sourcecodester Pisay Online E-Learning System version 1.0 Description The issue allows remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the user email, user pass, and id parameters on the admi...

9.8CVSS0.06022EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/22 12:00 a.m.•4 views

CVE-2020-14972: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sourcecodester Pisay Online E-Learning System 1.0 allow remote unauthenticated attackers to bypass authentication and achieve Remote Code Execution RCE via the useremail, userpass, and id parameters on the admin login-portal and the edit-lessons webpages...

9.8CVSS6AI score0.06022EPSS
SaveExploits1References2
zdt
zdt
•added 2020/05/19 12:00 a.m.•61 views

forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting Exploit Author: Daniel Ortiz Vendor Homepage: https://sourceforge.net/projects/forma/ Software link:...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/05/18 12:00 a.m.•171 views

Forma.LMS The E-Learning Suite 2.3.0.2 Cross Site Scripting

Exploit Title: forma.lms The E-Learning Suite 2.3.0.2 - Persistent Cross-Site Scripting Date: 2020-05-15 Exploit Author: Daniel Ortiz Vendor Homepage: https://sourceforge.net/projects/forma/ Software link: https://sourceforge.net/projects/forma/files/latest/download Tested on: XAMPP for Linux 64b...

7.4AI score
SaveExploits0
Rows per page
Query Builder