CVE-2006-2000

The provided connected sources confirm a concrete vulnerability: Cross-site Scripting (XSS) in logMethods 0.9, specifically in /lms/a2z.jsp, exploitable via the kwd parameter. This is a remote, client-side script injection risk that could allow an attacker to execute arbitrary HTML/JavaScript in ...

CVE-2002-1909

Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password...

CVE-2002-1910

CVE-2002-1910 affects Click2Learn Ingenium Learning Management System, versions 5.1–6.1. The root cause is the use of weak, reversible password encryption, enabling attackers to obtain passwords. Public sources confirm the affected products/versions and the vulnerability description across NVD/Re...