Sql injection

Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker with the role of student to perform a SQL injection on the 'searchvalue parameter in the...

Forma Learning Management System SQL注入漏洞

Forma Learning Management System LMS is a Learning Management System LMS. Forma Learning Management System 3.1.0 and earlier versions suffer from a SQL injection vulnerability that can be exploited to perform SQL injection on the appLms/ajax.server.php?r=mycertificate/getMyCertificates function's...