21 matches found
CVE-2022-31788
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0= pathname...
EUVD-2022-53177
Malicious code in bioql PyPI...
EUVD-2022-53179
Malicious code in bioql PyPI...
CVE-2022-31786
IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...
Idea IdeaLMS Cross-Site Scripting Vulnerability
IdeaLMS is an educational and learning management software from Idea. A cross-site scripting vulnerability exists in Idea IdeaLMS version 2022, which can be exploited by an attacker to execute JavaScript code on the client side...
CVE-2022-31786
IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...
CVE-2022-31786
IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...
Cross site scripting
IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...
CVE-2022-31786
IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...
CVE-2022-31786
IdeaLMS 2022 has a reported vulnerability: a reflected Cross Site Scripting (XSS) flaw that can be triggered via the path segment IdeaLMS/Class/Assessment/ in the application. The issue is described as a reflected XSS in IdeaLMS 2022, allowing an attacker to execute JavaScript code in the victim’...
IdeaLMS 跨站脚本漏洞
IdeaLMS is an educational and learning management software from Idea. A cross-site scripting vulnerability exists in Idea IdeaLMS version 2022, which can be exploited by an attacker to execute JavaScript code on the client side...
PT-2022-20930
Name of the Vulnerable Software and Affected Versions IdeaLMS version 2022 Description The issue allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATH INFO. This means an attacker can inject malicious scripts into the website, potentially stealing user data or taking...
CVE-2022-31786: Improper Neutralization of Input During Web Page Generation
IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...
CVE-2022-31788
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname...
CVE-2022-31788
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname...
CVE-2022-31788
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname...
Sql injection
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname...
CVE-2022-31788
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname...
CVE-2022-31788
IdeaLMS 2022 contains a SQL injection vulnerability in the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname, enabling an attacker to manipulate queries. CVSS data indicates high/critical impact (C/I/A HIGH in CVSS3.1; base score 9.8). No remediation/version patch details ...
PT-2022-20932
Name of the Vulnerable Software and Affected Versions IdeaLMS version 2022 Description The issue allows SQL injection via the "IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID=" pathname, specifically targeting the ClassID variable. This could potentially lead to unauthorized acces...