19 matches found
EUVD-2021-29545
Malicious code in bioql PyPI...
EUVD-2021-27771
Malicious code in bioql PyPI...
CVE-2025-11102
A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/editcontent.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be launched remotely. The exploit has been made available t...
CVE-2025-10782 Campcodes Online Learning Management System class.php sql injection
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument classname results in sql injection. The attack is possible to be carried out remotely. The exploit has been...
PT-2025-35431
Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code within the /admin/login.php file. Manipulatio...
CVE-2024-1970
A vulnerability, which was classified as problematic, was found in SourceCodester Online Learning System V2 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit h...
CVE-2021-40596
SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...
Online Learning System Cross-Site Scripting Vulnerability
Online Learning System is an online learning system by oretnom23 individual developers. A cross-site scripting vulnerability exists in Online Learning System V2 version 1.0, which stems from an incorrect manipulation of the parameter page that can lead to cross-site scripting...
CVE-2024-1970
CVE-2024-1970 affects SourceCodester Online Learning System V2.1.0 (and V2.0 in various records) with a cross-site scripting vulnerability in an unknown function of /index.php. The issue arises from manipulation of the page parameter, enabling remote exploitation and providing the attacker with a...
CVE-2021-40596
SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...
CVE-2021-40596
SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...
Sql injection
SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...
CVE-2021-40596
SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...
Online Learning System 2.0 Remote Code Execution
Exploit Title: Online Learning System 2.0 - Remote Code Execution RCE Date: 15/11/2021 Exploit Author: djebbaranon Vendor Homepage: https://github.com/oretnom23 Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/elearningv20.zip Version: 2.0 Tested on: Kali linux...
CVE-2021-42580
CVE-2021-42580 affects Sourcecodester Online Learning System 2.0. The vulnerability consists of a SQL injection-based authentication bypass in the admin/login.php and an authenticated file upload issue in Master.php, which together can be exploited to achieve unauthenticated remote code execution...
ECS Online Learning System v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page
E-learning Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A SQL injection vulnerability exists in the ShitiController.class.php page in the frontend of ECS Online Learning System v3.1.0. An attacker can exploit this vulnerability t...
SQL injection vulnerability in Nlist.aspx and Mall_Teacher.aspx pages of Xinqi Online Learning System.
Xinqi Online Learning System is an online learning platform system that can make learning plans, realize supervision and monitoring, and assist learning. A SQL injection vulnerability exists in the Nlist.aspx and MallTeacher.aspx pages of Xinqi Online Learning System. An attacker can use this...
Design flaws in the ajax/Common_Ajax.ashx page of the new startup e-learning system
Online Learning System is an e-learning platform system developed in . A design vulnerability exists in the ajax/CommonAjax.ashx page of Xinqi Online Learning System. The vulnerability exists in ajax/CommonAjax.ashx, which can be exploited by an attacker to construct a specific URL and disclose...
File Download Vulnerability in New Windward Technology's Online Learning Test System
New Windward Technology Online Learning Exam System is built based on enterprise-level database platform, the system architecture using a three-tier structure, B/S mode development can be used for online training and examination system. The product exists arbitrary file download vulnerability,...