2692 matches found
SourceCodester Online Exam System SQL注入漏洞
Online Exam System is an online exam system by oretnom23 individual developers. SourceCodester Online Exam System version 1.0 suffers from a SQL injection vulnerability that originates from a problem in the file adminpanel/admin/faceboxmodal/updateCourse.php, where manipulation of the parameter i...
PT-2023-20622 · Unknown · Sourcecodester Online Exam System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam System version 1.0 Description: A critical issue has been found in the SourceCodester Online Exam System. This issue affects the file adminpanel/admin/facebox modal/updateCourse.php, specifically the GET Parameter...
CVE-2023-31804
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category parameters...
CVE-2023-31804
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category parameters...
CVE-2023-31804: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category parameters...
CVE-2023-31804
Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category parameters...
PT-2023-19498 · Sourcecodester · Sourcecodester Simple Student Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Information System version 1.0 Description: A problematic issue was found in the system, affecting the /classes/Master.php?f=save course component of the Add New Course feature. The manipulation of the name...
CVE-2023-2425: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.php?f=savecourse of the component Add New Course. The manipulation of the argument name with the input leads to cross...
[SECURITY] Fedora 36 Update: moodle-3.11.13-1.fc36
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...
Moodle may display roles to users who don't have access to them
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...
CVE-2023-1402
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...
UBUNTU-CVE-2023-1402
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...
CVE-2023-1402
CVE-2023-1402 concerns Moodle: the course participation report may reveal roles a user should not view. Connected sources specify affected versions and fixes: Moodle 3.11–3.11.14; 4.0–4.0.8; 4.1–4.1.3; 4.2. PT-2023-25156 and OSV entries describe an XSS-related risk surface but confirm the same pa...
CVE-2023-1402
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...
CVE-2023-1402: Exposure of Sensitive Information to an Unauthorized Actor
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...
Moodle 安全漏洞
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle, which stems from the ability of a Course participation report to show other users. The...
PT-2023-16985 · Sourcecodester · Sourcecodester Automatic Question Paper Generator System
Name of the Vulnerable Software and Affected Versions: SourceCodester Automatic Question Paper Generator System version 1.0 Description: A critical issue has been found in the GET Parameter Handler component of the file admin/courses/view course.php. The manipulation of the id argument leads to s...
Trellix HAX 2023 Capture the Flag Results!
Trellix HAX 2023 Capture the Flag Results! By Mark Bereza · March 17, 2023 This story was also written by Jesse Chick. All good things must come to an end, and our annual CTF is unfortunately no exception. When this competition began, we asked each of you to try your hand at 12 new challenges –...
Trellix HAX 2023 Capture the Flag Results!
Trellix HAX 2023 Capture the Flag Results! By Mark Bereza · March 17, 2023 This story was also written by Jesse Chick. All good things must come to an end, and our annual CTF is unfortunately no exception. When this competition began, we asked each of you to try your hand at 12 new challenges –...