Lucene search
+L

734 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10782: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument classname results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•12 views

PT-2025-38984

Name of the Vulnerable Software and Affected Versions Campcodes Online Learning Management System version 1.0 Description A SQL injection issue exists in Campcodes Online Learning Management System. The issue is located in the file /admin/edit user.php within an unknown function. Manipulation of...

9.8CVSS7.4AI score0.00683EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•22 views

PT-2025-39050

Name of the Vulnerable Software and Affected Versions MasterStudy LMS versions through 3.6.20 Description A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows leveraging race conditions within the software. Recommendations Update...

4.3CVSS6.7AI score0.0021EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•2 views

CVE-2025-59576: Missing Authorization

Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through = 3.6.20...

6.5CVSS5.9AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•10 views

Campcodes Online Learning Management System SQL注入漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in Campcodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the parameter d in the file...

9.8CVSS7.8AI score0.00563EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•11 views

Campcodes Online Learning Management System 安全漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A security vulnerability exists in Campcodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the parameter classname in the file...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•2 views

CVE-2025-10817: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/adminuser.php. Executing manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made...

9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10809: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS5.5AI score0.00563EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10783: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addsubject.php. Executing manipulation of the argument subjectcode can lead to sql injection. The attack may be performed from remote. T...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•1 views

CVE-2025-10781: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editclass.php. Such manipulation of the argument classname leads to sql injection. The attack can be executed remotely. The exploit is publicly available and migh...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•1 views

CVE-2025-54744: Missing Authorization

Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through = 3.6.15...

6.5CVSS5.9AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•13 views

PT-2025-36249

Name of the Vulnerable Software and Affected Versions: MasterStudy LMS versions through 3.6.15 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Update MasterStudy LMS to a version later than 3.6.15...

6.5CVSS6.3AI score0.00227EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/01 3:32 p.m.•28 views

CVE-2025-9786 Campcodes Online Learning Management System teacher_signup.php sql injection

A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teachersignup.php. Performing manipulation of the argument firstname results in sql injection. The attack can be initiated remotely. The exploit has been made public and coul...

7.5CVSS0.00417EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/01 12:00 a.m.•1 views

CVE-2025-9786: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /teachersignup.php. Performing manipulation of the argument firstname results in sql injection. The attack can be initiated remotely. The exploit has been made public and coul...

9.8CVSS5.5AI score0.00417EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/01 12:00 a.m.•2 views

CVE-2025-9763: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /studentsignup.php. The manipulation of the argument Username results in sql injection. The attack can be launched remotely. The exploit is now public and may be...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/01 12:00 a.m.•1 views

CVE-2025-9751: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/31 12:00 a.m.•2 views

CVE-2025-9750: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/31 12:00 a.m.•13 views

Learning Management System 安全漏洞

Learning Management System is itsourcecode open source a learning management system. A security vulnerability exists in Learning Management System version 1.0, which is caused by a SQL injection attack due to incorrect manipulation of the parameter Username in the file /admin/login.php...

9.8CVSS7.7AI score0.00415EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/07/19 12:01 a.m.•20 views

CVE-2025-46102

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...

5.4CVSS6.4AI score0.00259EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/17 7:15 p.m.•16 views

CVE-2025-46102

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter...

5.4CVSS0.00259EPSS
SaveExploits1References3
Rows per page
Query Builder