Description


A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266839.

References



https://vuldb.com/?ctiid.266839

Permissions RequiredVDB Entry

https://vuldb.com/?id.266839

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.347576

Third Party AdvisoryVDB Entry


https://vuldb.com/?ctiid.266839

Permissions RequiredVDB Entry

https://vuldb.com/?id.266839

Third Party AdvisoryVDB Entry

https://vuldb.com/?submit.347576

Third Party AdvisoryVDB Entry

Weaknesses



CWE-89

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

6.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-06-02T13:15:08.230Z

1 year ago

Last modified

2025-02-11T14:05:30.993Z

1 year ago