CVE-2012-0798

The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role...

CVE-2012-0795

Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address...

CVE-2012-0796

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted 1 From: or 2 Sender: header...

CVE-2012-0801

lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors...

Design/Logic Flaw

lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors...

CVE-2012-0796

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted 1 From: or 2 Sender: header...

PT-2012-2877 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 2.0.x through 2.0.6 Moodle versions 2.1.x through 2.1.3 Moodle versions 2.2.x through 2.2.0 Description: The form-autocompletion functionality makes it easier for physically proximate attackers to discover passwords by reading...

PT-2012-2871 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.15 Moodle versions 2.0.x through 2.0.6 Moodle versions 2.1.x through 2.1.3 Moodle versions 2.2.x through 2.2.0 Description: The issue concerns the use of a hardcoded password in the rc4encrypt function, makin...

PT-2012-2873 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.15 Moodle versions 2.0.x through 2.0.6 Moodle versions 2.1.x through 2.1.3 Moodle versions 2.2.x through 2.2.0 Description: The issue allows remote authenticated users to inject arbitrary e-mail headers via...

osCommerce 2.2 File Upload

Remote file upload vulnerability in osCommerce filemanager.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Apache 2.2.x < 2.2.25 Remote Denial of Service Vulnerability

Binary data 801383.prm...

Solar FTP Server - Denial of Service

Solar FTP Server - Denial of Service source: https://www.securityfocus.com/bid/54306/info Solar FTP Server is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to force the affected application to become unresponsive, denying service to legitimate users. Solar...

Apache HTTP Server 'ap_pregsub()'function local denial of service vulnerability-vulnerability warning-the black bar safety net

Affected system: Apache Group The Apache 2.2. x Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 0 6 3 9 CVE ID: CVE-2 0 1 1-4 4 1 5 Apache HTTP Server is the Apache Software Foundation an open source web server, you can In most...

Apache Tomcat: Multiple vulnerabilities

Background Apache Tomcat is a Servlet-3.0/JSP-2.2 Container. Description Multiple vulnerabilities have been discovered in Apache Tomcat. Please review the CVE identifiers referenced below for details. Impact The vulnerabilities allow an attacker to cause a Denial of Service, to hijack a session, ...

SA-CONTRIB-2012-075 - Take Control - Cross Site Request Forgery (CSRF)

CVE: CVE-2012-2341 This module enables you to manage your Drupal file-system from within Drupal itself. The module does not sufficiently validate Ajax calls leading to possibility of a Cross Site Request Forgery CSRF attack. This vulnerability is mitigated by the fact that the attacker must be ab...

Ushahidi 2.2 Multiple Vulnerabilites

Exploit for php platform in category web applications Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response...

Ushahidi 2.2 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Full Disclosure: 04/12/2012 1 CSRF Ad...

Ushahidi 2.2 - Multiple Vulnerabilities

Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Full Disclosure: 04/12/2012 1 CSRF Ad...

mmPlayer 2.2 .ppl Buffer Overflow

!/usr/bin/perl Title: mmPlayer 2.2 .ppl Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= "RjRjh.ppl"; my $junk= "\x41" x 4090; my $nextseh= "\xEB\x06\x90\x90"; my $seh=...

mmPlayer 2.2 - .ppl Local Buffer Overflow (SEH)

mmPlayer 2.2 - .ppl Local Buffer Overflow SEH !/usr/bin/perl Title: mmPlayer 2.2 .ppl Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= "RjRjh.ppl"; my $junk= "\x41" x 4090; my...