CVE-2014-5257

Mô tả

Tham khảo

• packetstormsecurity.com/files/128978/Forma-Lms-1.2.1-Cross-Site-Scripting.html · Exploit
• sourceforge.net/projects/forma/files/version%201.x/formalms-v1.2.1-p01.zip/download · Patch
• securityfocus.com/archive/1/533905/100/0/threaded
• securityfocus.com/bid/70914 · Exploit
• htbridge.com/advisory/HTB23226 · Exploit

Lỗ hổng khác của formalms

• CVE-2026-26744TRUNG BÌNH 5.3A user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery functionality accessible via the /lostpwd endp…
• CVE-2023-46693TRUNG BÌNH 6.1Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters.
• CVE-2022-42925CAO 8.8There is a vulnerability on Forma LMS version 3.1.0 and earlier that could allow an authenticated attacker (with the role of student) to pri…
• CVE-2022-42924TRUNG BÌNH 6.5Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…
• CVE-2022-42923CAO 8.8Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allo…