Moodle Information Disclosure Vulnerability (CNVD-2020-10127)

Moodle is a learning platform designed to provide educators, administrators, and learners with a powerful, secure, and integrated system for creating personalized learning environments. An information disclosure vulnerability exists in Moodle versions prior to 3.7.2. An attacker could exploit the...

CVE-2020-1692

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

UBUNTU-CVE-2020-1692

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

Information disclosure

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

CVE-2020-1692

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course...

Opencast < 7.6.0 and 8.0.0 Multiple Vulnerabilities

Opencast is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GHSA-94QW-R73X-J7HG Users with ROLE_COURSE_ADMIN can create new users in Opencast

Impact Users with the role ROLECOURSEADMIN can use the user-utils endpoint to create new users not including the role ROLEADMIN. For example: bash Use the admin to create a new user with ROLECOURSEADMIN using the admin user. We expect this to work. % curl -i -u admin:opencast...

trainingcourseexperts.wa.edu.au Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1075616 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Semrush: IDOR in semrush academy

INTRODUCTION I used two accounts to search for this vulnerability: - id: 5410425 email: ████[email protected] - id: 5407773 email: ████@anosimple.com IP used: ███ Endpoint URL: https://www.semrush.com/academy/courses/userEnroll EXPLOITATION Description of Security Issue: When a user clicks on the...

Online Course Registration 2.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0...

Online Course Registration 2.0 Remote Code Execution

Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0 Category: Webapps Tested on: Xampp for Windows...

Design/Logic Flaw

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results...

CVE-2012-1161

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results...

CVE-2012-1156

Moodle before 2.2.2 has users' private files included in course backups...

Design/Logic Flaw

Moodle before 2.2.2 has users' private files included in course backups...

CVE-2012-1156

Moodle before 2.2.2 has users' private files included in course backups...

XSS Vulnerability in ED01-CMS

ED01-CMS is a content management system and the CMS project of Edwin Diaz's Udemy course "PHP for Beginners - Become a PHP Master". An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

Unauthorized Access Vulnerability in Course Center of Excellence

Premier Education is an educational organization that provides one-on-one tuition for primary and secondary school students and has tutorial classes in several subjects. An unauthorized access vulnerability exists in the Excellence Course Center, which can be exploited to gain unauthorized access...

PT-2020-14896 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7.2 Description: The issue concerns information exposure of service tokens for users enrolled in the same course. Recommendations: For versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue...

Unauthorized Access Vulnerability in Course Center of Excellence System

Shanghai Excellence Ruixin Digital Technology Co., Ltd, inherited from the Excellence Electronics Group, is committed to becoming China's leading education informatization manufacturer and Internet education operator, providing education informatization products and total solutions for more than...