28619 matches found
CVE-2012-1160
Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...
CVE-2012-1158
Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ are affected...
CVE-2012-1157
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+, 2.0 to 2.0.7+ are affected...
CVE-2012-1159
Moodle before 2.2.2: Overview report allows users to see hidden courses Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ affected...
CVE-2012-1161
Summary of CVE-2012-1161 (Moodle) : Affected Moodle installations before 2.2.2 are vulnerable to a course information leak where hidden courses appear in tag search results. The issue is a disclosure in the course listing mechanism, with an impact described asPartial confidentiality loss (NVD CVS...
CVE-2012-1170
The CVE-2012-1170 entry affects Moodle prior to 2.2.2, describing an issue in the external enrolment plugin context where capability checks are not thorough. The vulnerability is tied to insufficient permission validation in the enrolment workflow, enabling potential elevation of access via that ...
CVE-2012-1169
CVE-2012-1169 affects Moodle prior to 2.2.2, causing a personal information disclosure where the admin setting for user name display (set to first name) reveals full names in page breadcrumbs. Affected versions per Ubuntu listing include 2.0–2.0.7+, 2.1–2.1.4+, and 2.2–2.2.1+. The NVD entry confi...
CVE-2012-1160
Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...
CVE-2012-1160
CVE-2012-1160 affects Moodle prior to 2.2.2, with a permission flaw in Forum Subscriptions allowing unenrolled users to subscribe/unsubscribe via mod/forum/index.php. Public data confirms affected versions include Moodle 2.1.x up to 2.1.4+, and 2.2.x up to 2.2.1+. Root cause described as a permis...
CVE-2012-1159
CVE-2012-1159 concerns Moodle before 2.2.2 where the Overview report can disclose information by letting users see hidden courses. Public references confirm affected versions include 2.2.x up to 2.2.1+ and that the issue is an information disclosure vulnerability in course visibility. Connected a...
CVE-2012-1158
CVE-2012-1158 affects Moodle before 2.2.2. The vulnerability is a course information leak in the gradebook export, allowing users to see hidden grade items in exported data. The NVD entry confirms the impact as partial confidentiality loss with no integrity or availability impact, rating CVSSv3.1...
CVE-2012-1157
CVE-2012-1157 concerns Moodle prior to 2.2.2, where a default repository capabilities issue causes all repositories to be viewable by all users. Connected documents confirm the affected condition (default permissions affecting repositories) and identify Moodle versions affected. The root cause is...
CVE-2012-1156
Moodle vulnerability CVE-2012-1156 affects Moodle releases prior to 2.2.2, where private user files could be included in course backups. Connected advisories/cve listings confirm affected versions across 2.0–2.2.x (e.g., 2.0–2.0.7+, 2.1–2.1.4+, 2.2–2.2.1+) and describe this as a design/logic flaw...
CVE-2012-1168
Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified...
CVE-2012-1168
CVE-2012-1168 affects Moodle before 2.2.2. The vulnerability causes the user password to be reset if the password is not specified when updating a user profile. Affected versions include Moodle 2.0.x to 2.2.x (2.0–2.0.7+, 2.1–2.1.4+, 2.2–2.2.1+). No remediation details are provided in the connect...
CVE-2012-1155
Moodle has a database activity export permission issue where the export function incorrectly includes entries from groups the user does not belong to. Connected sources confirm this vulnerability (CVE-2012-1155) and enumerate affected Moodle versions (e.g., 1.9.x up to 1.9.16+, 2.0.x up to 2.0.7+...
Description of the cumulative update for Lync 2010: January 2012
Describes the bugs that are resolved in the January 2012 cumulative update package for Lync 2010.SummaryThis article describes the Microsoft Lync 2010 issues that are fixed in the cumulative update that is dated January 2012.This article describes the following items about the update package:The...
CVE-2012-5193
Bitweaver 2.8.1 and earlier versions are affected by multiple cross-site scripting (XSS) vulnerabilities (CVE-2012-5193). Attackers can inject arbitrary web script or HTML by manipulating path info or specific parameters: stats/index.php (path info, days), newsletters/edition.php, users/remind_pa...
CVE-2012-2237
Summary: CVE-2012-2237 affects Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2, enabling remote XSS via multiple vectors (1) javascript innerHTML in login form generation, (2) links, (3) resources URLs, and (4) the Display name in profiles. The underlying issue is insufficient sanitization/encod...