CVE-2018-16971 Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.
MediumCVSS 4.3
EPSS 0.65%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wisetail learning management system | <= 4.11.6 | No fix listed |
References
- blog.ziaurrashid.com exploit technical-description