PT-2019-17483 · Forma Spa · Forma Lms
Published
2019-12-03
·
Updated
2022-07-17
·
CVE-2019-5111
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Forma LMS version 2.2.1
Description
A SQL injection issue exists in the authenticated portion of the software. The "API Endpoint" /appLms/ajax.server.php and the parameter
filter cat are vulnerable to SQL injections, which can be exploited by authenticated attackers. An attacker can send a web request with parameters containing SQL injection attacks to trigger this issue, potentially allowing exfiltration of the database, user credentials, and, in certain configurations, access to the underlying operating system.Recommendations
For Forma LMS version 2.2.1, as a temporary workaround, consider restricting access to the /appLms/ajax.server.php "API Endpoint" and the
filter cat parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Forma Lms