Moodle 2.5.9 / 2.6.8 / 2.7.5 / 2.8.3 Cross Site Scripting

Moodle 2.5.9/2.6.8/2.7.5/2.8.3 Block Title Handler Cross-Site Scripting Vendor: Moodle Pty Ltd Product web page: https://www.moodle.org Affected version: 2.8.3, 2.7.5, 2.6.8 and 2.5.9 Summary: Moodle is a learning platform designed to provide educators, administrators and learners with a single...

Moodle 2.5.92.6.82.7.52.8.3 - Block Title Handler Cross-Site Scripting

Moodle 2.5.92.6.82.7.52.8.3 - Block Title Handler Cross-Site Scripting Moodle 2.5.9/2.6.8/2.7.5/2.8.3 Block Title Handler Cross-Site Scripting Vendor: Moodle Pty Ltd Product web page: https://www.moodle.org Affected version: 2.8.3, 2.7.5, 2.6.8 and 2.5.9 Summary: Moodle is a learning platform...

Moodle 2.5.9/2.6.8/2.7.5/2.8.3 - Block Title Handler Cross-Site Scripting

Moodle 2.5.9/2.6.8/2.7.5/2.8.3 Block Title Handler Cross-Site Scripting Vendor: Moodle Pty Ltd Product web page: https://www.moodle.org Affected version: 2.8.3, 2.7.5, 2.6.8 and 2.5.9 Summary: Moodle is a learning platform designed to provide educators, administrators and learners with a single...

Moodle 2.5.9/2.6.8/2.7.5/2.8.3 Block Title Handler Cross-Site Scripting

Summary Moodle is a learning platform designed to provide educators, administrators and learners with a single robust, secure and integrated system to create personalised learning environments. Description Moodle suffers from persistent XSS vulnerabilities. Input passed to the POST parameters...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerability (USN-2269-1)

Andy Lutomirski discovered a flaw with the Linux kernel's ptrace syscall on x8664 processors. An attacker could exploit this flaw to cause a denial of service System Crash or potential gain administrative privileges. Note that Tenable Network Security has extracted the preceding description block...

CVE-2014-2269

modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters...

CVE-2014-2269

CVE-2014-2269 affects vtiger CRM v6.0 prior to Security Patch 2. The vulnerability is in modules/Users/ForgotPassword.php and allows remote attackers to reset the password for arbitrary users by submitting a request containing username, password, and confirmPassword. This is a direct consequence ...

CVE-2014-2269

modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters...

CVE-2013-2269

The CVE-2013-2269 entry describes a logic flaw in Aruba Networks ClearPass (5.x, 6.0.1, 6.0.2) and Amigopod/ClearPass Guest (3.0–3.9.7) where an attacker can bypass access controls by initiating a guest request, then using parameter manipulation and information from a default holding page to loca...

CVE-2012-2269

CVE-2012-2269 (ownCloud) : Multiple XSS vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary scripts via various inputs across endpoints (stored XSS in apps/contacts/ajax/addcard.php, addproperty.php, createaddressbook; reflected XSS in files/download.php and files/...

CVE-2012-2269

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary field to apps/contacts/ajax/addcard.php, 2 the parameter parameter to apps/contacts/ajax/addproperty.php, 3 the name parameter to...

Debian Security Advisory DSA 2269-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2269-1. OpenVAS Vulnerability Test $Id: deb22691.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2269-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

CVE-2010-2269

CVE-2010-2269 affects Accoria Web Server (aka Rock Web Server) 1.4.7, via the loadstatic.cgi component. The root cause is a directory traversal flaw: an attacker can specify ".." in the name parameter to read arbitrary files. The public documents do not specify exploits, affected platforms beyond...

CVE-2010-2269

Directory traversal vulnerability in loadstatic.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2009-2269

creationtimestamp| type| source ---|---|--- 2009-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10069...

CVE-2009-2269

Empire CMS 5.1 is affected by a SQL injection in the default URI under e/tool/gbook/ through the bid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Evidence from NVD confirms a base CVSS v2.0 score of 7.5 ( HIGH ), with network access and low attack comple...

Gentoo Security Advisory GLSA 200507-24 (mozilla)

The remote host is missing updates announced in advisory GLSA 200507-24. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2269

CVE-2008-2269 affects AustinSmoke GasTracker (AS-GasTracker) 1.0.0. The root issue is an authentication bypass: remote attackers can set the gastracker_admin cookie to TRUE to gain privileges. Impact is described as credential bypass leading to elevated access. Connected sources (NVD, CVE registr...

Debian Security Advisory DSA 779-1 (mozilla-firefox)

The remote host is missing an update to mozilla-firefox announced via advisory DSA 779-1. Several problems have been discovered in Mozilla Firefox, a lightweight web browser based on Mozilla. For more details, please visit the referenced security advisory. The old stable distribution woody is not...

Debian: Security Advisory (DSA-810-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...