EUVD-2012-2903

Malware in sbrugna...

The vulnerability of the eLearning Server 5G platform, related to the use of files and directories accessible from external parties, allows a hacker to gain access to confidential information.

The vulnerability of the eLearning Server 5G platform is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain access to user photos, news feeds, and information resources with HTML-like content...

PT-2025-51244

Уязвимость платформы электронного обучения eLearning Server 5G связана с использованием файлов и каталогов, доступных внешним сторона. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к фотографиям пользователей платформы, новостной ленте, информационным...

The vulnerability of the eLearning Server 4G system in terms of access control deficiencies allows an intruder to gain access to the user’s file storage.

The vulnerability of the eLearning Server 4G system for managing learning and development is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to the user’s file storage by replacing the parameters of the current user’s identifie...

The vulnerability of the eLearning Server 4G system management and development framework lies in the lack of checks on input data for HTML tags. This allows attackers to alter settings in users’ personal dashboards or execute arbitrary codes.

The vulnerability of the eLearning Server 4G system management and development framework lies in the lack of checks on the input data for the presence of HTML tags, including a tag containing JavaScript code. Exploiting this vulnerability could allow an attacker to modify the settings of a user’s...

The vulnerability of the eLearning Server 4G system management and development system lies in the lack of checks on the input data for HTML tags. This allows a malicious individual to alter the main text of web pages or execute arbitrary code in the user’s browser.

The vulnerability of the eLearning Server 4G system management and development system is related to the lack of checks on the input data for the presence of HTML tags including a tag containing JavaScript code. Exploiting this vulnerability could allow an attacker to modify the main text of the...

PT-2019-2305

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to a lack of input validation for HTML tags, including those containing JavaScript code. This could allow a remote attacker to modify the main text of a web...

PT-2019-2306

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to modify a user's portfolio by altering the user id value in an HT...

PT-2019-2308

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to a lack of input validation for HTML tags, including those containing JavaScript code. This could allow a remote attacker to modify user account settings or...

PT-2019-2307

Name of the Vulnerable Software and Affected Versions eLearning Server 4G affected versions not specified Description The issue is related to inadequate access control in the eLearning Server 4G system, allowing a remote attacker to exploit the weakness. By manipulating the user id parameter in a...

elearning server 4g Multiple Vulnerabilities

No description provided by source. Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:eLearning Server Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on: Microsoft...

CVE-2012-2924

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2923

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Sql injection

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2924

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2012-2923

The provided data confirms CVE-2012-2923 as a SQL injection in Hypermethod eLearning Server 4G, specifically in news.php4 via the nid parameter. Exploitation could allow remote attackers to execute arbitrary SQL commands, impacting data confidentiality and integrity; the base CVSS score is 7.5 (H...

CVE-2012-2924

CVE-2012-2924 affects Hypermethod eLearning Server 4G. Vulnerability: PHP remote file inclusion in admin/setup.inc.php allows an attacker to supply a URL in the path parameter to execute arbitrary PHP code on the server. Affected software/component: Hypermethod eLearning Server 4G (admin/setup.in...

CVE-2012-2923

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

PT-2012-4369

Name of the Vulnerable Software and Affected Versions Hypermethod eLearning Server 4G Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the nid parameter in the "news.php4" endpoint. Recommendations For Hypermethod eLearning Server 4G, avoid usi...