Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2019-9886

eClass platform allows user to download arbitrary files without authentication

Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Eclass
Products
Eclass Ip
CVE-2019-9885

eClass platform contains a SQL injection vulnerability

eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.

CVSS 3.0 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Eclass
Products
Eclass Ip
CVE-2019-9884

eClass platform contains a Broken Access Control vulnerability

eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Eclass
Products
Eclass Ip