Lucene search
+L

792 matches found

CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•21 views

Creativeitem Academy-LMS Security Vulnerability

Creativeitem Academy-LMS is an online learning platform from Creativeitem, Inc. A security vulnerability exists in Creativeitem Academy-LMS version v.6.8.1, which stems from a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code and obtain sensitive informatio...

6.1CVSS6.9AI score0.00669EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/07/09 12:00 a.m.•36 views

CVE-2024-37870

SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter...

0.00488EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/09 12:00 a.m.•66 views

CVE-2024-37870

A SQL injection vulnerability exists in the processscore.php file of Learning Management System Project In PHP With Source Code version 1.0 . The flaw is caused by a lack of proper validation for external input, specifically via the id parameter, which allows attackers to execute arbitrary SQL co...

9.8CVSS8.4AI score0.00488EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/07/09 12:00 a.m.•35 views

CVE-2024-38959

Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter...

0.00669EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/09 12:00 a.m.•67 views

CVE-2024-38959

The Creativeitem Academy LMS Learning Management System version v.6.8.1 is affected by a Cross-Site Scripting (XSS) vulnerability. A remote attacker can exploit this flaw by targeting a string parameter to execute arbitrary code and access sensitive information. No specific remediation steps or e...

6.1CVSS7.2AI score0.00669EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/09 12:00 a.m.•20 views

CVE-2024-37870

SQL injection vulnerability in processscore.php in Learning Management System Project In PHP With Source Code 1.0 allows attackers to execute arbitrary SQL commands via the id parameter...

8.8AI score0.00488EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/09 12:00 a.m.•16 views

PT-2024-27799

Name of the Vulnerable Software and Affected Versions Learning Management System Project In PHP With Source Code version 1.0 Description The issue allows attackers to execute arbitrary SQL commands via the id parameter in the processscore.php file. This can lead to unauthorized access and...

9.8CVSS8.8AI score0.00488EPSS
SaveExploits1References8
Patchstack
Patchstack
•added 2024/06/21 10:51 a.m.•11 views

WordPress Academy LMS plugin <= 2.0.10 - Open Redirection vulnerability

Open Redirection vulnerability discovered by Mochamad Sofyan Patchstack Alliance in WordPress Plugin Academy LMS versions = 2.0.10...

3.5CVSS7AI score0.0027EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2024/06/17 7:15 p.m.•14 views

CVE-2024-37840

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter...

8.8CVSS6.1AI score0.00539EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/17 7:15 p.m.•42 views

CVE-2024-37840

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter...

8.8CVSS0.00539EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/06/17 12:00 a.m.•16 views

itsourcecode Learning Management System Security Vulnerability

itsourcecode Learning Management System is a learning management system from itsourcecode, Inc. A security vulnerability exists in itsourcecode Learning Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the...

8.8CVSS8.6AI score0.00539EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/06/17 12:00 a.m.•16 views

PT-2024-27776 · Unknown · Itsourcode Learning Management System

Name of the Vulnerable Software and Affected Versions: Itsourcecode Learning Management System Project In PHP With Source Code version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the LessonID parameter in the processscore.php file...

8.8CVSS8.1AI score0.00539EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/06/17 12:00 a.m.•15 views

CVE-2024-37840

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter...

9.2AI score0.00539EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/17 12:00 a.m.•4 views

CVE-2024-37840: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in processscore.php in Itsourcecode Learning Management System Project In PHP With Source Code v1.0 allows remote attackers to execute arbitrary SQL commands via the LessonID parameter...

8.8CVSS6.4AI score0.00539EPSS
SaveExploits1References1
OSV
OSV
•added 2024/06/02 3:15 p.m.•18 views

CVE-2024-5588

A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotel...

8.8CVSS6.5AI score0.00614EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/06/02 3:00 p.m.•20 views

CVE-2024-5588 itsourcecode Learning Management System processscore.php sql injection

A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotel...

6.5CVSS7.4AI score0.00614EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/06/02 3:00 p.m.•48 views

CVE-2024-5588 itsourcecode Learning Management System processscore.php sql injection

A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotel...

6.5CVSS6.8AI score0.00614EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/06/02 12:00 a.m.•14 views

PT-2024-36599 · Unknown · Itsourcode Learning Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Learning Management System version 1.0 Description: A critical issue has been found in the itsourcecode Learning Management System, affecting an unknown functionality of the file processscore.php. The manipulation of the LessonID...

8.8CVSS7.6AI score0.00614EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/02 12:00 a.m.•4 views

CVE-2024-5588: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotel...

8.8CVSS6.4AI score0.00614EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/31 12:00 a.m.•31 views

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from the use of referral source URLs that require no additional cleanup...

9.8CVSS6.8AI score0.00541EPSS
SaveExploits0References2
Rows per page
Query Builder