Pesquisadores
Voltar
Eugene Salov
Pesquisador de
Group-IB
#20843
de 60,592
15
CVSS total
Vulnerabilidades
·
2
Alta
2
PT-2012-4369
2012-05-21
7.5
CVE-2012-2923
Hypermethod
Hypermethod Elearning Server 4G
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `nid` parameter in the "news.php4" endpoint.
PT-2012-4370
2012-05-21
7.5
CVE-2012-2924
Hypermethod
Hypermethod Elearning Server
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter in the `admin/setup.inc.php` file.