Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CreativeitemAcademy Lms

10 matches found

CVE
CVE•added 2022/05/25 2:15 p.m.•98 views

CVE-2022-29380

Academy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the SEO panel.

4.8CVSS4.9AI score0.00162EPSS
CVE
CVE•added 2023/08/04 4:15 p.m.•51 views

CVE-2023-38964

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

6.1CVSS6AI score0.03083EPSS
CVE
CVE•added 2023/09/15 2:15 a.m.•46 views

CVE-2023-4973

A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument searched_word/searched_tution_class_typ...

6.1CVSS4.7AI score0.0573EPSS
CVE
CVE•added 2023/09/15 3:15 a.m.•43 views

CVE-2023-4974

A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument price_min/price_max leads to sql injection. The attack may be ...

9.8CVSS8.1AI score0.47951EPSS
CVE
CVE•added 2023/08/03 9:15 a.m.•42 views

CVE-2023-4119

A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability affects unknown code of the file /academy/home/courses. The manipulation of the argument query/sort_by leads to cross site scripting. The attack can be initiated remotely. VDB-235966 is the identifie...

6.1CVSS5.1AI score0.01321EPSS
CVE
CVE•added 2023/07/19 2:15 a.m.•38 views

CVE-2023-3752

A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /home/courses. The manipulation of the argument sort_by leads to cross site scripting. The attack may be launched remotely. VDB-234422 is th...

6.1CVSS4.7AI score0.00059EPSS
CVE
CVE•added 2023/02/03 1:15 a.m.•34 views

CVE-2022-47130

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page.

4.3CVSS4.7AI score0.07248EPSS
CVE
CVE•added 2023/02/03 1:15 a.m.•34 views

CVE-2022-47132

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.

8.8CVSS8.7AI score0.07242EPSS
CVE
CVE•added 2024/07/09 9:15 p.m.•34 views

CVE-2024-38959

Cross Site Scripting vulnerability in Creativeitem Academy LMS Learning Management System v.6.8.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the string parameter.

6.1CVSS7.2AI score0.00134EPSS
CVE
CVE•added 2023/02/03 1:15 a.m.•31 views

CVE-2022-47131

A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.

4.8CVSS5.1AI score0.00393EPSS