الباحثون
رجوع
Andrey Komarov
باحث من
Group-IB
#20793
من 60,592
15
إجمالي CVSS
الثغرات
·
2
عالية
2
PT-2012-4369
2012-05-21
7.5
CVE-2012-2923
Hypermethod
Hypermethod Elearning Server 4G
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `nid` parameter in the "news.php4" endpoint.
PT-2012-4370
2012-05-21
7.5
CVE-2012-2924
Hypermethod
Hypermethod Elearning Server
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter in the `admin/setup.inc.php` file.