CVE-2022-27104

Description

References

• formalms.org/download.html · Product
• swascan.com/it/security-blog · Third Party Advisory
• swascan.com/security-advisory-forma-lms · Third Party Advisory

Más vulnerabilidades de formalms

• CVE-2026-26744MEDIO 5.3A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endp…
• CVE-2023-46693MEDIO 6.1Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters.
• CVE-2022-42925ALTO 8.8There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to pri…
• CVE-2022-42924MEDIO 6.5Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…
• CVE-2022-42923ALTO 8.8Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…