Vulnerabilidades de Amitkolloldey
CVEs publicadas que afetam produtos de Amitkolloldey: 2 registro(s), com severidade, exploração e correções.
CVE-2019-25320
Média · 6.5
CWE-89 12/02/2026
elearning-script 1.0 - Authentication Bypass
E Learning Script 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard without valid credentials by manipulating login parameters. Attackers can exploit the /login.php file by sending a specific payload '=''or' to bypass authentication and gain unauthorized access to the system.
CVE-2020-37035
Alta · 8.2
CWE-89 30/01/2026
e-learning Php Script 0.1.0 - 'search' SQL Injection
e-Learning PHP Script 0.1.0 contains a SQL injection vulnerability in the search functionality that allows attackers to manipulate database queries through unvalidated user input. Attackers can inject malicious SQL code in the 'search' parameter to potentially extract, modify, or access sensitive database information.