Vulnerabilities (CVE)

Filtered by vendor Learning Management System Project Subscribe
Filtered by product Learning Management System
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25201 1 Learning Management System Project 1 Learning Management System 2024-11-21 5.0 MEDIUM 7.5 HIGH
SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information.
CVE-2021-25200 1 Learning Management System Project 1 Learning Management System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.