Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and, in certain configurations, access the underlying operating system.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
formalms formalms 2.2.1 |
Vulmon