PT-2019-17483 · Forma Spa · Forma Lms

Publicado 2019-12-03 · Atualizado 2022-07-17 · CVE-2019-5111

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forma LMS version 2.2.1

Description A SQL injection issue exists in the authenticated portion of the software. The "API Endpoint" /appLms/ajax.server.php and the parameter filter cat are vulnerable to SQL injections, which can be exploited by authenticated attackers. An attacker can send a web request with parameters containing SQL injection attacks to trigger this issue, potentially allowing exfiltration of the database, user credentials, and, in certain configurations, access to the underlying operating system.

Recommendations For Forma LMS version 2.2.1, as a temporary workaround, consider restricting access to the /appLms/ajax.server.php "API Endpoint" and the filter cat parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-5111

Produtos afetados

Forma Lms

Referências · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2019-0904 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-5111 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5111 · Aviso do Fabricante