Skip to content
OpenAdvisories

Vendor

Spaghettilearning

1 known vulnerabilities.

Products

DoceboLMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2018-25170

    DoceboLMS 1.2 SQL Injection via lesson.php

    DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, and idU parameters. Attackers can send GET requests to the lesson.php endpoint with malicious…

    Spaghettilearning DoceboLMS