Researchers
Back
Eugene Salov
Researcher from
Group-IB
#20843
of 60,592
15
Total CVSS
Vulnerabilities
·
2
High
2
PT-2012-4369
2012-05-21
7.5
CVE-2012-2923
Hypermethod
Hypermethod Elearning Server 4G
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `nid` parameter in the "news.php4" endpoint.
PT-2012-4370
2012-05-21
7.5
CVE-2012-2924
Hypermethod
Hypermethod Elearning Server
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter in the `admin/setup.inc.php` file.