CVE-2012-1160

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...

CVE-2012-1158

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export...

CVE-2012-1159

Moodle before 2.2.2: Overview report allows users to see hidden courses Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ affected...

CVE-2012-1157

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+, 2.0 to 2.0.7+ are affected...

CVE-2012-1158

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ are affected...

CVE-2012-1161

Summary of CVE-2012-1161 (Moodle) : Affected Moodle installations before 2.2.2 are vulnerable to a course information leak where hidden courses appear in tag search results. The issue is a disclosure in the course listing mechanism, with an impact described asPartial confidentiality loss (NVD CVS...

CVE-2012-1170

The CVE-2012-1170 entry affects Moodle prior to 2.2.2, describing an issue in the external enrolment plugin context where capability checks are not thorough. The vulnerability is tied to insufficient permission validation in the enrolment workflow, enabling potential elevation of access via that ...

CVE-2012-1169

CVE-2012-1169 affects Moodle prior to 2.2.2, causing a personal information disclosure where the admin setting for user name display (set to first name) reveals full names in page breadcrumbs. Affected versions per Ubuntu listing include 2.0–2.0.7+, 2.1–2.1.4+, and 2.2–2.2.1+. The NVD entry confi...

CVE-2012-1160

CVE-2012-1160 affects Moodle prior to 2.2.2, with a permission flaw in Forum Subscriptions allowing unenrolled users to subscribe/unsubscribe via mod/forum/index.php. Public data confirms affected versions include Moodle 2.1.x up to 2.1.4+, and 2.2.x up to 2.2.1+. Root cause described as a permis...

CVE-2012-1160

Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php...

CVE-2012-1159

CVE-2012-1159 concerns Moodle before 2.2.2 where the Overview report can disclose information by letting users see hidden courses. Public references confirm affected versions include 2.2.x up to 2.2.1+ and that the issue is an information disclosure vulnerability in course visibility. Connected a...

CVE-2012-1158

CVE-2012-1158 affects Moodle before 2.2.2. The vulnerability is a course information leak in the gradebook export, allowing users to see hidden grade items in exported data. The NVD entry confirms the impact as partial confidentiality loss with no integrity or availability impact, rating CVSSv3.1...

CVE-2012-1157

CVE-2012-1157 concerns Moodle prior to 2.2.2, where a default repository capabilities issue causes all repositories to be viewable by all users. Connected documents confirm the affected condition (default permissions affecting repositories) and identify Moodle versions affected. The root cause is...

CVE-2012-1156

Moodle vulnerability CVE-2012-1156 affects Moodle releases prior to 2.2.2, where private user files could be included in course backups. Connected advisories/cve listings confirm affected versions across 2.0–2.2.x (e.g., 2.0–2.0.7+, 2.1–2.1.4+, 2.2–2.2.1+) and describe this as a design/logic flaw...

CVE-2012-1168

CVE-2012-1168 affects Moodle before 2.2.2. The vulnerability causes the user password to be reset if the password is not specified when updating a user profile. Affected versions include Moodle 2.0.x to 2.2.x (2.0–2.0.7+, 2.1–2.1.4+, 2.2–2.2.1+). No remediation details are provided in the connect...

CVE-2012-1168

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified...

CVE-2012-1155

Moodle has a database activity export permission issue where the export function incorrectly includes entries from groups the user does not belong to. Connected sources confirm this vulnerability (CVE-2012-1155) and enumerate affected Moodle versions (e.g., 1.9.x up to 1.9.16+, 2.0.x up to 2.0.7+...

CVE-2012-5193

Bitweaver 2.8.1 and earlier versions are affected by multiple cross-site scripting (XSS) vulnerabilities (CVE-2012-5193). Attackers can inject arbitrary web script or HTML by manipulating path info or specific parameters: stats/index.php (path info, days), newsletters/edition.php, users/remind_pa...

CVE-2012-4384

letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Calendar...

CVE-2012-1572

OpenStack Keystone is affected by CVE-2012-1572: extremely long passwords can exhaust Keystone’s stack space and crash the service. The connected sources confirm this behavior but do not provide a specific remediation or patched version in the supplied documents.