CVE-2013-3601

Affected software: Coursemill Learning Management System (LMS) 6.6. Vulnerability: inadequate restriction of JSP function calls allows remote authenticated users (via Student role) to perform arbitrary JSP operations by supplying an op parameter. Impact: privilege escalation to execute restricted...

CVE-2013-1125

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System ACS, Application Networking Manager ANM, Prime LAN Management Solution LMS, Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Netwo...

CVE-2013-1125

Summary: CVE-2013-1125 affects Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, an...

Joomla Components lms SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title: Jooml...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...

rsh Excessive Trust Vulnerability

Added: 01/25/2013 CVE: CVE-1999-0515 Background The rsh service allows remote users, using an rsh client, to execute individual shell commands on an rsh server without the need for a password. The rsh process uses the .rhosts file to list trusted hosts those machines allowed to use the service...

Cisco Prime LAN Management Solution Remote Command Execution Vulnerability

Cisco Prime LAN Management Solution is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-6392

Cisco Prime LAN Management Solution LMS 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779...

CVE-2012-6392

Cisco Prime LAN Management Solution LMS 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779...

CVE-2012-6392

CVE-2012-6392 affects Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux. The vulnerability arises because LMS does not properly validate authentication and authorization requests in TCP sessions, allowing remote attackers to execute arbitrary commands via a crafted session (por...

Cisco Prime LAN Management Solution Command Execution Vulnerability

Cisco Prime LAN Management Solution LMS Virtual Appliance contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the root user. The vulnerability is due to improper validation of authentication and authorization commands...

Docebo LMS 3605 HTML Injection

TITLE ....... Docebo LMS HTML Injection DATE ........ 15.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.docebo.com VERSION ..... docebo3605.zip TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the ty...

Docebo LMS 3605 SQL Injection

TITLE ....... Docebo LMS docebo3605.zip DATE ........ 15.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.docebo.com VERSION ..... docebo3605.zip TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the ty...

Docebo LMS <= v4.0.4 (messages) Remote Code Execution

No description provided by source. ?php / Docebo LMS = v4.0.4 messages remote code execution exploit vendor: http://www.docebo.com/ software link: http://www.docebo.com/community/doceboCms/ author: mrme::rwx kru email: steventhomasseeley!gmail!com "We must become the change we want to see in the...

Docebo Lms 4.0.4 - Messages Remote Code Execution

Docebo Lms 4.0.4 - Messages Remote Code Execution if$GLOBALS'modname' != '' $modulecfg =& createModule...

Docebo LMS 4.0.4 SQL Injection / Code Execution

if$GLOBALS'modname' != '' $modulecfg =& createModu...

Docebo LMS <= v4.0.4 (messages) Remote Code Execution

Exploit for php platform in category web applications if$GLOBALS'modname' != ''...

[DCA-2011-0003]: LMS Web Ensino - Multiple XSS, Session Fixation, CSRF and SQL Injection

DCA-2011-0003 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - LMS Web Ensino Vendor Product Description - Portuguese - O Learning Management System LMS Web Ensino uma ferramenta completa para o gerenciamento e oferta de cursos e treinamentos...