6 matches found
EUVD-2022-4270
Malicious code in bioql PyPI...
GHSA-J465-7MP6-3XG3 Moodle places a session key in a URL
repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner...
CVE-2014-0125
repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner...
CVE-2014-0125
repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner...
CVE-2014-0125
Moodle vuln CVE-2014-0125: repository/alfresco/lib.php in Moodle up to 2.3.11, 2.4.x < 2.4.9, 2.5.x < 2.5.5, and 2.6.x
PT-2014-3486
Name of the Vulnerable Software and Affected Versions Moodle versions 2.3.11 and earlier, 2.4.x before 2.4.9, 2.5.x before 2.5.5, 2.6.x before 2.6.2 Description The issue allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner. This is due ...