Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2021/10/18 9:15 p.m.•24 views

CVE-2021-41152

OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere o...

7.7CVSS6.7AI score
SaveExploits0References3
Mend
Mend
•added 2021/10/18 8:55 p.m.•4 views

CVE-2021-41152

OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere o...

8.3CVSS0.0124EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•8 views

CVE-2021-41152: Improper Limitation of a Pathname to a Restricted Directory

OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In affected versions by manipulating the HTTP request an attacker can modify the path of a requested file download in the folder component to point to anywhere o...

7.7CVSS5.8AI score0.0124EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/10/18 12:00 a.m.•7 views

PT-2021-23132

Name of the Vulnerable Software and Affected Versions OpenOlat versions prior to 15.5.8 OpenOlat versions prior to 16.0.1 Description OpenOlat is a web-based e-learning platform. In affected versions, an attacker can modify the path of a requested file download in the folder component to point to...

7.7CVSS0.0124EPSS
SaveExploits0References6
securityvulns
securityvulns
•added 2003/05/03 12:00 a.m.•40 views

SILLY BEHAVIOR Part II : Internet Explorer 5.5 - 6.0

Thursday, May 1, 2003 The following represents a trivial yet elaborate method of injecting arbitrary html into the "My Computer" zone on win98 using the Internet Explorer series of browsers. The manufacturer, commonly known as "Microsoft" has a done a splendid job of battening down the hatches wi...

7.1AI score
SaveExploits0
Rows per page
Query Builder