Skip to content
OpenAdvisories

Vendor

Forma

8 known vulnerabilities.

Products

Forma LMS 6 E-Learning Suite 1 LMS 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.6
    CVE-2022-42924

    SQL injection in Forma LMS

    Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'dyn_filter' parameter in the …

    Forma Forma LMS
  • High 7.6
    CVE-2022-41680

    SQL Injection in Forma LMS

    Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'search[value] parameter in th…

    Forma Forma LMS
  • High 8.3
    CVE-2022-42923

    SQL injection in Forma LMS

    Forma LMS on its 3.1.0 version and earlier is vulnerable to a SQL injection vulnerability. The exploitation of this vulnerability could allow an authenticated attacker (with the role of student) to perform a SQL injection on the 'id' parameter in the 'appCore…

    Forma Forma LMS