Learning-Management-System vulnerabilities

A vulnerability was identified in Kusalkasilva Learning-Management-System up to version ffeb873f8803f1e9664384ff75000c7da45466d2, affecting an unknown function in the file search_class.php. Manipulation of the argument school_year leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.

Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2 contains a SQL injection vulnerability in the mysql_query function in admin/login.php (Administrator Login Endpoint). Manipulation of username/password arguments allows remote attack.

Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2 contains a SQL injection vulnerability in the mysql_error function in login.php (Login Endpoint). Manipulation of username/password arguments allows remote attack.