Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
9.1CRITICAL3.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Product Status

Learn more

Versions 1 Total

Default Status: unknown

affected

  • affected from ip before 2.25.10.2.1 

Credits

  • Mr. Kaede Rukawa

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.