10 matches found
CVE-2002-1909
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password...
CVE-2002-1910
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords reversible algorithm, which allows attackers to obtain passwords...
ingeniumcanada.org XSS vulnerability
Open Bug Bounty ID: OBB-568693 Description| Value ---|--- Affected Website:| ingeniumcanada.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Ingenium Learning Management System 5.1/6.1 Reversible Password Hash Weakness
No description provided by source. source: http://www.securityfocus.com/bid/5970/info Ingenium Learning Management System uses a weak algorithm to hash user and administrative credentials. Passwords may be trivially obtained by reversing the password hash. An attacker must be able to gain...
CVE-2002-1909
The CVE-2002-1909 entry documents that Click2Learn Ingenium Learning Management System (versions 5.1 and 6.1) stores the hashed administrative password in a config.txt file located under the htdocs directory, enabling remote attackers to obtain the admin password. The connected Red Hat advisory a...
CVE-2002-1910
CVE-2002-1910 affects Click2Learn Ingenium Learning Management System, versions 5.1–6.1. The root cause is the use of weak, reversible password encryption, enabling attackers to obtain passwords. Public sources confirm the affected products/versions and the vulnerability description across NVD/Re...
CVE-2002-1910
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords reversible algorithm, which allows attackers to obtain passwords...
CVE-2002-1909
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password...
Multiple Click2Learn Ingenium bugs
Password's hashes access, weak encryption...
Ingenium Admin Password Vulnerability
The vendor was contacted, but I have not received any response other than an autoresponder over the past week... -E Security Advisory -- Click2Learn's Ingenium LMS Brian Enigma [email protected] http://netninja.com/papers/ingenium/ ----------------------- OVERVIEW ----------------------- Produc...