CVE-2019-11062

The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...

Command injection

The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...

CVE-2019-11062

The CVE-2019-11062 entry affects SUNNET WMPro v5.0 and v5.1 for the eLearning system. Affected component: the API endpoint /teach/course/doajaxfileupload.php, where OS Command Injection is possible. Root cause described as unauthenticated remote command execution on the target server. Impact is h...

CVE-2019-11062 SUNNET WMPro v5.0 and v5.1 has OS Command Injection

The SUNNET WMPro v5.0 and v5.1 for eLearning system has OS Command Injection via "/teach/course/doajaxfileupload.php". The target server can be exploited without authentication...

The vulnerability of the eLearning Server 4G system in terms of access control deficiencies allows an intruder to gain access to the user’s file storage.

The vulnerability of the eLearning Server 4G system for managing learning and development is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to the user’s file storage by replacing the parameters of the current user’s identifie...

The vulnerability of the eLearning Server 4G system management and development system lies in the lack of checks on the input data for HTML tags. This allows a malicious individual to alter the main text of web pages or execute arbitrary code in the user’s browser.

The vulnerability of the eLearning Server 4G system management and development system is related to the lack of checks on the input data for the presence of HTML tags including a tag containing JavaScript code. Exploiting this vulnerability could allow an attacker to modify the main text of the...

The vulnerability of the eLearning Server 4G system regarding access control allows a hacker to gain access and modify the user’s portfolio.

The vulnerability of the eLearning Server 4G system management and development framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access—and modify—user portfolios by altering the value of the user identifier in HTTP request...

The vulnerability of the eLearning Server 4G system management and development framework lies in the lack of checks on input data for HTML tags. This allows attackers to alter settings in users’ personal dashboards or execute arbitrary codes.

The vulnerability of the eLearning Server 4G system management and development framework lies in the lack of checks on the input data for the presence of HTML tags, including a tag containing JavaScript code. Exploiting this vulnerability could allow an attacker to modify the settings of a user’s...

PT-2019-2305

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to a lack of input validation for HTML tags, including those containing JavaScript code. This could allow a remote attacker to modify the main text of a web...

PT-2019-2306

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to modify a user's portfolio by altering the user id value in an HT...

PT-2019-2307

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to exploit the weakness. By manipulating the user id parameter in a...

PT-2019-2308

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to a lack of input validation for HTML tags, including those containing JavaScript code. This could allow a remote attacker to modify user account settings or...

elearning.un.org XSS vulnerability

Open Bug Bounty ID: OBB-675494 Description| Value ---|--- Affected Website:| elearning.un.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

elearning.rcgp.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-639516 Description| Value ---|--- Affected Website:| elearning.rcgp.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ILIAS < 5.1.27, 5.2.16, 5.3.5 Multiple Vulnerabilities

ILIAS eLearning is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

alrowad.sa XSS vulnerability

Open Bug Bounty ID: OBB-596282 Description| Value ---|--- Affected Website:| alrowad.sa Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

elearning-kompetenzzentrum.de XSS vulnerability

Open Bug Bounty ID: OBB-593523 Description| Value ---|--- Affected Website:| elearning-kompetenzzentrum.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

elearn.eb.com XSS vulnerability

Open Bug Bounty ID: OBB-552767 Description| Value ---|--- Affected Website:| elearn.eb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

elearning.virtualpathology.leeds.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-545255 Description| Value ---|--- Affected Website:| elearning.virtualpathology.leeds.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

ILIAS 5.3.4 XSS Vulnerability

ILIAS eLearning version 5.3.4 is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...