5207 matches found
WordPress Learning Management System Plugin - course_id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Good LMS - Learning Management System WP Plugin SQL Injection Exploit Author Web Site: http://esecurity.ir Special Thanks : Meisam Monsef email protected - Telegram ID : @meisamrce Vendor Homepage: https://goodlayers.com/ Versio...
WordPress LearnDash LMS plugin <=2.5.3 - Unauthenticated Arbitrary File Upload vulnerability
An unauthenticated arbitrary file upload vulnerability by NinTechNet in WordPress LearnDash LMS plugin versions =2.5.3. Solution Update the WordPress LearnDash LMS plugin to the latest available version at least 2.5.4...
ATutor LMS Cross-Site Scripting Vulnerability
ATutor LMS is an open source web-based learning management system LCMS. The system provides course settings, textbook package downloads, multiple reading options, and other features. A cross-site scripting vulnerability exists in ATutor LMS version 2.2. A remote attacker can exploit this...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...
CVE-2015-6521
Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...
CVE-2015-6521
Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...
CVE-2015-6521
Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...
CVE-2015-6521
ATutor LMS version 2.2 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CNVD entry states a cross-site scripting flaw exists in ATutor LMS 2.2, allowing a remote attacker to inject arbitrary web script or HTML. The NVD entry corroborates XSS in ATutor LMS 2.2 with CVSS v3 b...
CVE-2015-6521: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ATutor LMS version 2.2...
PT-2017-7031
Name of the Vulnerable Software and Affected Versions ATutor LMS version 2.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. Recommendations For ATutor LMS version 2.2, update to a newer version that contains a fix for this issue...
LMS King Pro, SQL Injection
LMS King Lite and LMS King Professional by king-products.net, versions up to 3.2.3.19 lite and 3.2.3.47 pro, SQL Injection resolution: update to version 3.2.3.20 lite and 3.2.3.48 pro update notice url: https://www.king-products.net/lms-king.html...
LMS King Lite, SQL Injection
LMS King Lite and LMS King Professional by king-products.net, versions up to 3.2.3.19 lite and 3.2.3.47 pro, SQL Injection resolution: update to version 3.2.3.20 lite and 3.2.3.48 pro update notice url: https://www.king-products.net/lms-king.html...
BlackBoard LMS 9.1.140152.0 XSS / File Upload
Document Title: =============== BlackBoard LMS 9.1 9.1.140152.0 Stored XSS/Arbitrary File Upload Product Description: =============== The Learning Management System has changed the way students and educators interact. Blackboard's LMS solutions offer much more than simple, classroom interaction,...
LMS King Professional Component SQL Injection Vulnerability in Joomla!
Joomla! is an open source, cross-platform content management system developed using PHP and MySQL. A SQL injection vulnerability exists in the cpid parameter in Joomla! LMS King Professional, which can be exploited by attackers to access or modify database data...
Joomla LMS King Professional 3.2.40 SQL Injection
Exploit Title: Joomla! Component LMS King Professional v3.2.4.0 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://king-products.net/ Software: https://extensions.joomla.org/extensions/extension/living/education-a-culture/lms-king-professional-for-joomla/ Demo:...
Joomla LMS King Professional 3.2.4.0 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component LMS King Professional v3.2.4.0 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://king-products.net/ Software:...
Joomla! Component LMS King Professional 3.2.4.0 - SQL Injection
Exploit Title: Joomla! Component LMS King Professional v3.2.4.0 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://king-products.net/ Software: https://extensions.joomla.org/extensions/extension/living/education-a-culture/lms-king-professional-for-joomla/ Demo:...
Joomla! Component LMS King Professional 3.2.4.0 - SQL Injection
Joomla! Component LMS King Professional 3.2.4.0 - SQL Injection Exploit Title: Joomla! Component LMS King Professional v3.2.4.0 - SQL Injection Dork: N/A Date: 02.08.2017 Vendor : http://king-products.net/ Software:...
Cross site scripting
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2016-8935
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...