learningdigital orca hcm vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated malicious users to upload files containing malicious script to execute RCE attacks.

Learningdigital Orca Hcm

5.8

CVSSv2

The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any website. Remote attackers can use the vulnerability to execute phishing attacks.

Learningdigital Orca Hcm

4

CVSSv2

The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges.

Learningdigital Orca Hcm

7.5

CVSSv2

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote malicious users to execute the management function without logging in, access members’ information, modify and delete the courses in system, thus causin...

Learningdigital Orca Hcm

10

CVSSv2

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in.

Learningdigital Orca Hcm

5

CVSSv2

The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thru Path Traversal without logging in.

Learningdigital Orca Hcm

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook