CVE-2023-45878

GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubricsvisualisesaveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set...

PT-2021-22898

Name of the Vulnerable Software and Affected Versions Gibbon version 22 Description A reflected XSS issue exists in multiple pages of the Gibbon application, allowing for arbitrary execution of JavaScript. This is achieved by manipulating parameters such as gibbonCourseClassID, gibbonPersonID,...

CVE-2021-40492: Improper Neutralization of Input During Web Page Generation

A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php...

Exploit for Cross-site Scripting in Gibbonedu Gibbon

CVE-2021-40492 CVE-2021-40492 Gibbon version 22 Reflected Cros...