7 matches found
CVE-2023-4226
š ļø ExplotaciĆ³n CVE-2023-4226 para Chamilo LMS š DescripciĆ³n Script en Python que automatiza la explotaciĆ³n de CVE-2023-4226 , una vulnerabilidad de carga de archivos sin restricciones en Chamilo LMS = v1.11.24. Sube un web shell PHP basado en PentesterMonkey y configura .htaccess para lograr una...
EUVD-2023-54096
Malicious code in bioql PyPI...
CVE-2024-8001
A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. A user with the role learner can use the administrative...
CVE-2024-8001 VIWIS LMS Print authorization
A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. A user with the role learner can use the administrative...
PT-2024-38746 Ā· Viwis Lms Ā· Viwis Lms
Name of the Vulnerable Software and Affected Versions: VIWIS LMS version 9.11 Description: A critical issue was found in the Print Handler component, leading to missing authorization. This allows a user with the role learner to access the entire exam, including solutions, in the web application...
CVE-2024-32730
SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the...
PT-2024-24817 Ā· Sap Ā· Sap Enable Now Manager
Name of the Vulnerable Software and Affected Versions: SAP Enable Now Manager affected versions not specified Description: The issue is related to the lack of necessary authorization checks for authenticated users, leading to escalation of privileges. An attacker with the 'Learner' role could...