Eclass - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2019-07-25.

Products

• Eclass Ip - 3 CVEs

Newest CVEs of Eclass

• CVE-2019-9884 - CVSS 9.8 (critical), 2019-07-25: eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page.
• CVE-2019-9885 - CVSS 9.8 (critical), 2019-07-25: eClass platform < ip.2.5.10.2.1 allows an attacker to execute SQL command via /admin/academic/studenview_left.php StudentID parameter.
• CVE-2019-9886 - CVSS 9.1 (critical), 2019-07-11: Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before…