Learningdigital.com Inc. - vulnerabilities (CVEs)

6 CVEs in 1 products, 0 in the last 30 days, newest from 2021-07-19.

Products

• Orca Hcm - 6 CVEs

Newest CVEs of Learningdigital.com Inc.

• CVE-2021-35963 - CVSS 9.8 (critical), 2021-07-19: The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers…
• CVE-2021-35966 - CVSS 6.1 (medium), 2021-07-19: The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any…
• CVE-2021-35965 - CVSS 9.8 (critical), 2021-07-19: The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain…
• CVE-2021-35968 - CVSS 4.3 (medium), 2021-07-19: The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the…
• CVE-2021-35964 - CVSS 9.8 (critical), 2021-07-19: The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management…
• CVE-2021-35967 - CVSS 5.3 (medium), 2021-07-19: The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory…