CVE-2019-5110

Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

CVE-2019-5110

Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

CVE-2019-5109

Forma LMS 2.2.1 is affected by SQL injection vulnerabilities in the authenticated portion. The TALOS advisory/TALOS-2019-0902 details SQLi in /appCore/ajax.adm_server.php (dir parameter) and TALOS-2019-0903/0904 describe additional vectors; CVE-2019-5109 covers /appLms/ajax.server.php filter_cat ...

CVE-2019-5109

Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

CVE-2019-5109

Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

CVE-2019-5112

Forma LMS 2.2.1 is affected by authenticated SQL injection vulnerabilities in the /appLms/ajax.server.php endpoint (parameters filter_cat and filter_status). The TALOS advisory confirms exploitable injections that could lead to exfiltration of database information and, in some configurations, acc...

CVE-2019-5112

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filterstatus was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with...

CVE-2019-5112

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filterstatus was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with...

CVE-2019-5111

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filtercat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters...

CVE-2019-5111

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filtercat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters...

CVE-2019-5111

Forma LMS 2.2.1 is affected by authenticated SQL injection in the /appLms/ajax.server.php endpoint, specifically parameters filter_cat and filter_status. Talos and multiple sources confirm exploitable injections could lead to data disclosure (e.g., usernames/password hashes) and, in some configur...

CVE-2019-5109: Improper Neutralization of Special Elements used in an SQL Command

Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

PT-2019-17483

Name of the Vulnerable Software and Affected Versions Forma LMS version 2.2.1 Description A SQL injection issue exists in the authenticated portion of the software. The "API Endpoint" /appLms/ajax.server.php and the parameter filter cat are vulnerable to SQL injections, which can be exploited by...

CVE-2019-5111

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filtercat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters...

PT-2019-17484

Name of the Vulnerable Software and Affected Versions Forma LMS version 2.2.1 Description An exploitable SQL injection vulnerability exists in the authenticated portion of the software. The /appLms/ajax.server.php URL and the filter status parameter are affected, allowing authenticated attackers ...

PT-2019-17482

Name of the Vulnerable Software and Affected Versions Forma LMS version 2.2.1 Description Exploitable SQL injection vulnerabilities exist in the authenticated portion of the software. Specially crafted web requests can cause SQL injections, allowing an attacker to send a web request with paramete...

CVE-2019-5110: Improper Neutralization of Special Elements used in an SQL Command

Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing...

PT-2019-17481

Name of the Vulnerable Software and Affected Versions Forma LMS version 2.2.1 Description Exploitable SQL injection vulnerabilities exist in the authenticated portion of the software. Specially crafted web requests can cause SQL injections, potentially allowing exfiltration of the database, user...

CVE-2019-5112

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filterstatus was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with...

CVE-2019-5112: Improper Neutralization of Special Elements used in an SQL Command

Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filterstatus was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with...