Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise ELS Enterprise Learning Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2014-2456

Technical details for CVE-2014-2456 are not publicly provided in the connected documents. Monitoring for updates is recommended; no concrete vulnerable component, impact, or remediation is described in the supplied materials.

CVE-2011-0851

Unspecified vulnerability in Oracle PeopleSoft Enterprise ELS 9.0 Bundle 19 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Learning Mgmt...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise ELS 9.0 Bundle 19 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Learning Mgmt...

CVE-2011-0851

Unspecified vulnerability in Oracle PeopleSoft Enterprise ELS 9.0 Bundle 19 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Enterprise Learning Mgmt...

CourseMill Enterprise Learning Management System 'userlogin.jsp' SQL注入漏洞

CourseMill Enterprise Learning Management System是一款基于JSP的WEB应用程序。 CourseMill Enterprise Learning Management System不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'userlogin.jsp'脚本对用户提交的用户名参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Trivantis CourseMill Enterprise Learning...