CVE-2014-5257

概要

参考情報

• packetstormsecurity.com/files/128978/Forma-Lms-1.2.1-Cross-Site-Scripting.html · Exploit
• sourceforge.net/projects/forma/files/version%201.x/formalms-v1.2.1-p01.zip/download · Patch
• securityfocus.com/archive/1/533905/100/0/threaded
• securityfocus.com/bid/70914 · Exploit
• htbridge.com/advisory/HTB23226 · Exploit

formalms のその他の脆弱性

• CVE-2026-26744中 5.3A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endp…
• CVE-2023-46693中 6.1Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters.
• CVE-2022-42925高 8.8There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to pri…
• CVE-2022-42924中 6.5Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…
• CVE-2022-42923高 8.8Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…