writeups.xyz / Diving into Open-source LMS Codebases

Submitter : c2a

Date: 16 November 2021

Bounty : undisclosed

Vulnerabilities :

• Insecure File Upload
• Insecure Deserialization
• RCE
• CSRF
• SQL Injection
• Reflected XSS

Programs :

• Moodle
• Chamilo LMS

Authors :

• Poh Jia Hao (@Chocologicall)

Link :
https://starlabs.sg/blog/2021/11-diving-into-open-source-lms-ccodebases/