CVE-2025-56749

概要

参考情報

• suryadina.com/academy-lms-jwt-secret-7k9m2x4p8q · Exploit

academy lms のその他の脆弱性

• CVE-2025-71179中 6.1Creativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs en…
• CVE-2023-53876中 5.4Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site sc…
• CVE-2025-56748中 6.4Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limi…
• CVE-2025-56746低 2.2Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation …
• CVE-2025-56747中 6.5Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regul…