IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.

Published Jun 10, 2022 · Updated Aug 3, 2024 · Assigned by mitre