CVE-2021-43136

概要

参考情報

• packetstormsecurity.com/files/164930/FormaLMS-2.4.4-Authentication-Bypass.html · Exploit
• blog.hacktivesecurity.com · Third Party Advisory
• blog.hacktivesecurity.com/index.php/2021/10/05/cve-2021-43136-formalms-the-evil-default-value-that-leads-to-authentication-bypass · Exploit
• formalms.org · Vendor Advisory

formalms のその他の脆弱性

• CVE-2026-26744中 5.3A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endp…
• CVE-2023-46693中 6.1Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters.
• CVE-2022-42925高 8.8There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to pri…
• CVE-2022-42924中 6.5Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…
• CVE-2022-42923高 8.8Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…