Vulnerabilities (CVE)

Filtered by vendor Ideaco Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31788 1 Ideaco 1 Idealms 2023-12-10 7.5 HIGH 9.8 CRITICAL
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.
CVE-2022-31786 1 Ideaco 1 Idealms 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
IdeaLMS 2022 allows reflected Cross Site Scripting (XSS) via the IdeaLMS/Class/Assessment/ PATH_INFO.
CVE-2022-31787 1 Ideaco 1 Ideatms 2023-12-10 7.5 HIGH 9.8 CRITICAL
IdeaTMS 2022 is vulnerable to SQL Injection via the PATH_INFO