Vulnerabilidades do King-products Learning Management System King

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam King-products Learning Management System King: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:king-products:learning_management_system_king

CVE-2017-20274 Alta · 8.2 CWE-89 19/06/2026

Joomla LMS King Professional 3.2.4.0 SQL Injection via learningpath

Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cp_id parameter. Attackers can send GET requests to index.php with the option=com_lmsking, view=lmsking, layout=learningpath, and task=learningPath parameters to extract sensitive database information.