The vulnerability of the eLearning Server 4G system management and development framework lies in the lack of checks on input data for HTML tags. This allows attackers to alter settings in users’ personal dashboards or execute arbitrary codes.

The vulnerability of the eLearning Server 4G system management and development framework lies in the lack of checks on the input data for the presence of HTML tags, including a tag containing JavaScript code. Exploiting this vulnerability could allow an attacker to modify the settings of a user’s...

PT-2019-2305

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to a lack of input validation for HTML tags, including those containing JavaScript code. This could allow a remote attacker to modify the main text of a web...

PT-2019-2306

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to modify a user's portfolio by altering the user id value in an HT...

PT-2019-2308

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to a lack of input validation for HTML tags, including those containing JavaScript code. This could allow a remote attacker to modify user account settings or...

PT-2019-2307

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to exploit the weakness. By manipulating the user id parameter in a...

CVE-2012-2924

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2923

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Sql injection

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2923

The provided data confirms CVE-2012-2923 as a SQL injection in Hypermethod eLearning Server 4G, specifically in news.php4 via the nid parameter. Exploitation could allow remote attackers to execute arbitrary SQL commands, impacting data confidentiality and integrity; the base CVSS score is 7.5 (H...

CVE-2012-2924

CVE-2012-2924 affects Hypermethod eLearning Server 4G. Vulnerability: PHP remote file inclusion in admin/setup.inc.php allows an attacker to supply a URL in the path parameter to execute arbitrary PHP code on the server. Affected software/component: Hypermethod eLearning Server 4G (admin/setup.in...

PT-2012-4369

Name of the Vulnerable Software and Affected Versions Hypermethod eLearning Server 4G Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the nid parameter in the "news.php4" endpoint. Recommendations For Hypermethod eLearning Server 4G, avoid usi...

PT-2012-4370

Name of the Vulnerable Software and Affected Versions Hypermethod eLearning Server 4G affected versions not specified Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the path parameter in the admin/setup.inc.php file. Recommendations At the moment, there i...

CVE-2012-2924: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

eLearning server 4g - Multiple Vulnerabilities

eLearning server 4g - Multiple Vulnerabilities Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:"eLearning Server" Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on...