Sql injection

Multiple SQL injection vulnerabilities in the saveconnection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the 1 coursereportuiconfigname or 2...

PT-2012-2113

Name of the Vulnerable Software and Affected Versions DoceboLMS versions 4.0.4 and earlier Description The issue concerns SQL injection vulnerabilities in the save connection function within the iotask module of DoceboLMS. These vulnerabilities allow remote authenticated users with admin or teach...