CVE-2021-43136

Description

References

• packetstormsecurity.com/files/164930/FormaLMS-2.4.4-Authentication-Bypass.html · Exploit
• blog.hacktivesecurity.com · Third Party Advisory
• blog.hacktivesecurity.com/index.php/2021/10/05/cve-2021-43136-formalms-the-evil-default-value-that-leads-to-authentication-bypass · Exploit
• formalms.org · Vendor Advisory

Weitere Schwachstellen in formalms

• CVE-2026-26744MITTEL 5.3A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endp…
• CVE-2023-46693MITTEL 6.1Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters.
• CVE-2022-42925HOCH 8.8There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to pri…
• CVE-2022-42924MITTEL 6.5Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…
• CVE-2022-42923HOCH 8.8Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…