CVE-2025-71179

Mô tả

Tham khảo

• codecanyon.net/item/academy-course-based-learning-management-system/22703468 · Product
• creativeitem.com/products/academy-learning-management-system · Broken Link
• cod3rLucas/security-advisories · Exploit
• exploit-db.com/exploits/51654 · Exploit

Lỗ hổng khác của academy lms

• CVE-2023-53876TRUNG BÌNH 5.4Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with stored cross-site sc…
• CVE-2025-56749NGHIÊM TRỌNG 9.4Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows atta…
• CVE-2025-56748TRUNG BÌNH 6.4Creativeitem Academy LMS up to and including 5.13 uses predictable password reset tokens based on Base64 encoded templates without rate limi…
• CVE-2025-56746THẤP 2.2Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation …
• CVE-2025-56747TRUNG BÌNH 6.5Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor controller where regul…