Elearning Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-2924 HIGH POC This Week

PHP remote file inclusion vulnerability in admin/setup.inc.php in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Code Injection RCE Elearning Server

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

2.1%

CVE-2012-2923 HIGH POC This Week

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Elearning Server

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

0.9%

CVE-2012-2924

EPSS 2% CVSS 7.5

HIGH POC This Week

PHP Code Injection RCE +1

NVD Exploit-DB

CVE-2012-2923

EPSS 1% CVSS 7.5

HIGH POC This Week

SQLi Elearning Server

NVD Exploit-DB