CVSS: 6.9EPSS: %CPEs: 1EXPL: 0CVE-2024-8001 – VIWIS LMS Print authorization
https://notcve.org/view.php?id=CVE-2024-8001
A vulnerability was found in VIWIS LMS 9.11. It has been classified as critical. Affected is an unknown function of the component Print Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. • https://vuldb.com/?ctiid.284352 https://vuldb.com/?id.284352 • CWE-862: Missing Authorization CWE-863: Incorrect Authorization •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2018-1000535
https://notcve.org/view.php?id=CVE-2018-1000535
lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e. lms en versiones iguales o anteriores a la LMS_011123 contiene una vulnerabilidad de divulgación de archivos locales en la funcionalidad de lectura de archivos en el módulo LMS que puede resultar en la lectura de archivos en el servidor. Este ataque parece ser explotable mediante un parámetro GET. La vulnerabilidad parece haber sido solucionada tras el commit con ID 254765e. • https://0dd.zone/2018/06/01/LMS-Local-File-Disclosure https://github.com/lmsgit/lms/issues/1271 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •