Eclass (Broadlearning) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-07-25. Vendor: Broadlearning.

CVEs of Eclass

• CVE-2019-9885 - CVSS 9.8 (critical), 2019-07-25: eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.
• CVE-2019-9884 - CVSS 9.8 (critical), 2019-07-25: eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page.
• CVE-2019-9886 - CVSS 9.1 (critical), 2019-07-11: Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before…