Vulnerability Spotlight: SQL injection vulnerabilities in Forma Learning Management System
Cisco Talos discovered three SQL injection vulnerabilities in the authenticated portion of Forma LMS 2.2.1, found by Yuri Kramarz of Security Advisory EMEAR. Specially crafted web requests with parameters containing SQL injection attacks can trigger the...