simple e-learning system vulnerabilities and fixes

Recent CVEs affecting simple e-learning system, with upgrade or downgrade steps. 11 tracked.

Also searched as: simple e learning system, simplee-learningsystem.

simple e-learning system has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-11-07. Highest priority: CVE-2022-40872 (score 61/100).

• CVE-2022-43319 HIGH 7.5 DOWNGRADE An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple
• CVE-2022-40872 CRITICAL 9.8 DOWNGRADE An SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1.0., in /vcs/c
• CVE-2022-2704 MEDIUM 4.3 MITIGATE A vulnerability was found in SourceCodester Simple E-Learning System
• CVE-2022-2701 LOW 3.5 MITIGATE A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System
• CVE-2022-2699 MEDIUM 6.3 MITIGATE A vulnerability was found in SourceCodester Simple E-Learning System
• CVE-2022-2698 MEDIUM 6.3 MITIGATE A vulnerability was found in SourceCodester Simple E-Learning System
• CVE-2022-2697 MEDIUM 6.3 MITIGATE A vulnerability was found in SourceCodester Simple E-Learning System
• CVE-2022-2665 MEDIUM 6.3 MITIGATE A vulnerability classified as critical was found in SourceCodester Simple E-Learning System
• CVE-2022-2490 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical has been found in SourceCodester Simple E-Learning System 1.0
• CVE-2022-2489 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SourceCodester Simple E-Learning System 1.0
• CVE-2022-2396 LOW 3.5 DOWNGRADE A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0

FAQ

How do I fix simple e-learning system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is simple e-learning system being exploited right now?

None of the tracked simple e-learning system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which simple e-learning system CVE should I patch first?

CVE-2022-40872 currently ranks highest (61/100): An SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1.0., in /vcs/c.

RSS feed for simple e-learning system · ← Back to latest CVEs