EUVD-2017-12228

Malware in sbrugna...

U.S. General Services Administration: IDOR at training.smartpay.gsa.gov/reports/quizzes-taken-by-user

Hey, I found an IDOR that allow anyone view other user result by changing USERID parameter. /reports/quizzes-taken-by-user.csv/USERID Step to Produce: Go to the Section quizzes-taken-by-user as Shown in the Screenshot attached. Step 2: Click on Download CSV. Step 3 Intercept the Request using the...

Adobe Captivate Remote Code Execution Vulnerability

Adobe Captivate is a rapid response authoring tool for creating eLearning content such as software demos, software simulations, branching scenarios and randomized quizzes in .swf and HTML5 formats. A remote code execution vulnerability exists in the quiz reporting feature of Adobe Captivate, whic...

Remote code execution

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

Information disclosure

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3098

Adobe Captivate

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3098

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

CVE-2017-3087

Adobe Captivate

CVE-2017-3087: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-3098: Improper Input Validation

Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...

Adobe Captivate Quiz Reporting Feature 'internalServerReporting.php' File Upload RCE

The Adobe Captivate application running on the remote web server is affected by a remote code execution vulnerability in the quiz reporting feature within the 'internalServerReporting.php' script due to improper sanitization and verification of uploaded files before placing them in a...

Moodle 'mod/quiz/report/statistics/statistics_question_table.php' cross-site scripting vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in the Moodle 'mod/quiz/report/statistics/statisticsquestiontable.php' script. A remote...