Vulnerabilities

TI-2021-07460 CVE-2021-25200 · GHSA-wwg7-4xg3-4x5x

Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0…

MEDIUM 46

Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01874 Published 2021-07-28 No fix listed CWE-434

TI-2021-07461 CVE-2021-25201 · GHSA-hx4w-7rr6-9497

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers…

LOW 36

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01535 Published 2021-07-23 No fix listed CWE-89

Vulnerabilities

Filters

Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0…

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers…