CVE-2012-2923

The provided data confirms CVE-2012-2923 as a SQL injection in Hypermethod eLearning Server 4G, specifically in news.php4 via the nid parameter. Exploitation could allow remote attackers to execute arbitrary SQL commands, impacting data confidentiality and integrity; the base CVSS score is 7.5 (H...

CVE-2012-2924

CVE-2012-2924 affects Hypermethod eLearning Server 4G. Vulnerability: PHP remote file inclusion in admin/setup.inc.php allows an attacker to supply a URL in the path parameter to execute arbitrary PHP code on the server. Affected software/component: Hypermethod eLearning Server 4G (admin/setup.in...