Vulnerabilidades de CyberTutor
CVEs publicadas que afetam produtos de CyberTutor: 2 registro(s), com severidade, exploração e correções.
CVE-2026-19853
Média · 5.3
CWE-306 24/08/2026
CyberTutor|NewSiteServer (NSS) - Missing Authentication
NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school.
CVE-2026-19852
Média · 6.1
CWE-434 24/08/2026
CyberTutor|NewSiteServer (NSS) - Arbitrary File Upload
NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting.