Lucene search

Learning Management System Security Vulnerabilities

cve

CVE-2021-25200

Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.

9.8CVSS

9.6AI Score

0.008EPSS

2021-07-30 02:15 PM

cve

CVE-2021-25201

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information.

7.5CVSS

8AI Score

0.002EPSS

2021-07-23 02:15 PM