CVE-2021-25201

CVE-2021-25201 corresponds to an SQL injection vulnerability in Learning Management System v1.0 where the id parameter is exploited to execute arbitrary SQL and potentially expose sensitive database information. Multiple connected sources corroborate the issue and its impact; no details on affect...

CVE-2021-25200

CVE-2021-25200 represents an arbitrary file upload vulnerability in SourceCodester Learning Management System v1.0. The flaw allows an attacker to upload to lms/student_avatar.php, enabling arbitrary code execution. Affected product: SourceCodester LMS 1.0. Root cause: improper validation of file...