Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: BroadLearning Component: Eclass Ip Clear all filters
TI-2019-07264 CVE-2019-9885 · GHSA-xvj9-g93g-8ggp

eClass platform contains a SQL injection vulnerability

Priority MEDIUM 47

eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02624 Published 2019-07-25 Fixed in 2.25.10.2.1 CWE-89
TI-2019-07263 CVE-2019-9884 · GHSA-v994-ggf7-gpj5

eClass platform contains a Broken Access Control vulnerability

Priority MEDIUM 47

eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0296 Published 2019-07-25 Fixed in 2.25.10.2.1 CWE-284