Vulnerability history

Cross Site Scripting (XSS) vulnerability

Broken Access Control vulnerability

Arbitrary File Upload vulnerability

Arbitrary Directory Deletion vulnerability

Instructor+ Arbitrary File Upload vulnerability

Instructor+ SQL Injection vulnerability

Student+ Arbitrary File Upload vulnerability

Student+ Remote Code Execution (RCE) vulnerability

Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Deletion vulnerability

Arbitrary Option Update to Privilege Escalation vulnerability

Subscriber+ SQL Injection vulnerability

Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary Directory Deletion vulnerability

Unauthenticated Arbitrary User Token Generation vulnerability

Unauthenticated Privilege Escalation vulnerability

Unauthenticated SQL Injection vulnerability