GCVE - cpe:2.3:a:formalms:formalms:2.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:formalms:formalms:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

Vendor	Formalms (`5d6eefd1-3f43-5de9-a9a1-101f4b1d6adc`)
Product	Formalms (`eb3bde59-a638-5032-a64d-cbde845acc50`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/formalms/formalms`	purl2cpe	2026-06-01 10:12:37.320304
`pkg:sourceforge/forma`	purl2cpe	2026-06-01 10:12:37.320306

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-5112`	vulnerable	2026-06-08 05:13:57.720345	Details available HIGH (7.4) Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filter_status was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and, in certain configurations, access the underlying operating system. Published: 2019-12-03T21:38:14.000Z Updated: 2024-08-04T19:47:56.082Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2019-0904	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5111`	vulnerable	2026-06-08 05:13:57.720004	Details available HIGH (7.4) Exploitable SQL injection vulnerability exists in the authenticated portion of Forma LMS 2.2.1. The /appLms/ajax.server.php URL and parameter filter_cat was confirmed to suffer from SQL injections and could be exploited by authenticated attackers. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and, in certain configurations, access the underlying operating system. Published: 2019-12-03T21:37:54.000Z Updated: 2024-08-04T19:47:56.757Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2019-0904	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5110`	vulnerable	2026-06-08 05:13:57.719552	Details available HIGH (7.4) Exploitable SQL injection vulnerabilities exist in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and, in certain configurations, access the underlying operating system. Published: 2019-12-03T21:44:17.000Z Updated: 2024-08-04T19:47:56.674Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2019-0903	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-5109`	vulnerable	2026-06-08 05:13:57.719105	Details available HIGH (7.4) Exploitable SQL injection vulnerabilities exists in the authenticated portion of Forma LMS 2.2.1. Specially crafted web requests can cause SQL injections. An attacker can send a web request with parameters containing SQL injection attacks to trigger this vulnerability, potentially allowing exfiltration of the database, user credentials and, in certain configurations, access the underlying operating system. Published: 2019-12-03T21:43:16.000Z Updated: 2024-08-04T19:47:56.716Z Open on db.gcve.eu Reference links https://talosintelligence.com/vulnerability_reports/TALOS-2019-0902	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.