E-learning Management System vulnerabilities
15 known vulnerabilities in E-learning Management System from Lopalopa. 15 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
E-learning Management System: Out-of-bounds Read
A Directory Listing issue was found in Kashipara E-Learning Management System v1.0, which allows remote attackers to access sensitive files and directories via /admin/uploads.
- 9.8 Critical severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.
- 9.8 Critical severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter.
- 9.8 Critical severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the title and content parameters.
- 9.8 Critical severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter.
- 9.8 Critical severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and class_id parameters.
- 7.2 High severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the firstname, lastname, and username parameters.
- 8.8 High severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the school_year parameter.
- 9.8 Critical severity
E-learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the firstname, lastname, and class_id paramete
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Project 1.0 via the date_start, date_end, and title parameters.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 via the subject_code parameter.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0 via the title and content parameters.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0 via the school_year parameter.
- 9.8 Critical severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.
- 7.2 High severity
e_learning_management_system_project: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters.