Vulnerability Spotlight: SQL injection vulnerabilities in Forma Learning Management System

Yuri Kramarz of Security Advisory EMEAR discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered three SQL injection vulnerabilities in the authenticated portion of the Formal Learning Management System. LMS is a set of software that allows companies to build and hos...

Unspecified vulnerability in Moodle (CNVD-2019-43889)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that can be exploited by attackers to bypass security restrictions and perform unauthorized...

Moodle Injection Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. An injection vulnerability exists in Moodle, which can be exploited by an attacker to inject scripts...

Vulnerabilities in the Frontend of IM-Learning Intelligent Learning Management System of Guangyi Orient

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. An override access vulnerability exists in the frontend of the Guangyi Orient IM-Learning Intelligent Learning Management System, which can be exploited by an...

XSS Vulnerability in IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. An XSS vulnerability exists in the Guangyi East IM-Learning Intelligent Learning Management System, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Frontend of IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. A SQL injection vulnerability exists in the frontend of the IM-Learning Intelligent Learning Management System in Guangyi East. An attacker can exploit this...

Arbitrary File Upload Vulnerability in IM-Learning Intelligent Learning Management System of Guangyi East

IM-Learning Intelligent Learning Management System is a web-based academy with key technologies that can be customized and expanded. An arbitrary file upload vulnerability exists in the Guangyi East IM-Learning Intelligent Learning Management System. An attacker can exploit the vulnerability to...

ILIAS cross-site scripting vulnerability (CNVD-2018-10487)

ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS versions prior to 5.1.26, 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.4. A remote...

PHP Scripts Mall Learning and Examination Management System Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Learning and Examination Management System Script is an online learning and examination management system from PHP Scripts Mall India. The system is mainly used for online exams and online quizzes. A cross-site scripting vulnerability exists in PHP Scripts Mall Learning and...

Learning And Examination Management System Script 2.3.1 XSS

Exploit Title: Learning and Examination Management System Script 2.3.1 a Stored XSS Date: 09.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/learning-examination-management-system/ Category: Web Application Exploit Author: Prasenjit...

WordPress Plugin Learning Management System - course_id SQL Injection

WordPress Plugin Learning Management System - courseid SQL Injection Exploit Title: Good LMS - Learning Management System WP Plugin SQL Injection Date: 2018-01-24 Exploit Author: Esecurity.ir Exploit Author Web Site: http://esecurity.ir Special Thanks : Meisam Monsef [email protected] - Telegra...

WordPress Good LMS SQL Injection

Exploit Title: Good LMS - Learning Management System WP Plugin SQL Injection Date: 2018-01-24 Exploit Author: Esecurity.ir Exploit Author Web Site: http://esecurity.ir Special Thanks : Meisam Monsef [email protected] - Telegram ID : @meisamrce Vendor Homepage: https://goodlayers.com/ Version: A...

WordPress Learning Management System Plugin - course_id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Good LMS - Learning Management System WP Plugin SQL Injection Exploit Author Web Site: http://esecurity.ir Special Thanks : Meisam Monsef email protected - Telegram ID : @meisamrce Vendor Homepage: https://goodlayers.com/ Versio...

WordPress Plugin Learning Management System - 'course_id' SQL Injection

Exploit Title: Good LMS - Learning Management System WP Plugin SQL Injection Date: 2018-01-24 Exploit Author: Esecurity.ir Exploit Author Web Site: http://esecurity.ir Special Thanks : Meisam Monsef [email protected] - Telegram ID : @meisamrce Vendor Homepage: https://goodlayers.com/ Version: A...

BlackBoard LMS 9.1.140152.0 XSS / File Upload

Document Title: =============== BlackBoard LMS 9.1 9.1.140152.0 Stored XSS/Arbitrary File Upload Product Description: =============== The Learning Management System has changed the way students and educators interact. Blackboard's LMS solutions offer much more than simple, classroom interaction,...

IBM Kenexa LMS on Cloud Cross-Site Scripting Vulnerability

IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS developed by IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and sha...

CVE-2016-8929

IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

CVE-2016-8933

IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences /../ to view arbitrary files on the system...

CVE-2016-6124

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

CVE-2016-6125

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...