SUSE CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

SUSE CVE-2017-7491

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

SUSE CVE-2017-7532

In Moodle 3.x, course creators are able to change system default settings for courses...

SUSE CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

SUSE CVE-2017-12157

In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...

Future-Depth Institutional Management Website 代码问题漏洞

Future-Depth Institutional Management Website is a user-friendly institutional website from the individual developers at Future-Depth that offers various types of courses for students. A security vulnerability exists in Future-Depth Institutional Management Website IMS version 1.0. An attacker...

An ever green, ever great way to learn Spring

I could do this post every week. Wait, I do do this post every week! It's called This Week in Spring, and in it I recap a lot of interesting new bits of content on the internet that elaborate or introduce or innovate. I love those points of data. They help. But they're almost never a full-guided...

Autolab path traversal vulnerability

Autolab is a course management service. Autolab supports automatic grading of programming assignments. a path traversal vulnerability exists in Autolab. An attacker could exploit this vulnerability to view the contents of a file...

CVE-2015-10049

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...

Cross site scripting

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...

CVE-2015-10049

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...

CVE-2015-10049 Overdrive Eletrônica course-builder oeditor.html cross site scripting

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...

CVE-2015-10049

The CVE-2015-10049 entry describes a Cross-Site Scripting vulnerability in Overdrive Eletrônica course-builder, affecting versions up to 1.7.x. The issue involves unknown functionality in the file coursebuilder/modules/oeditor/oeditor.html being manipulated to trigger XSS, with remote exploit via...

Overdrive Eletrônica course-builder 跨站脚本漏洞

course-builder is an open source application from Overdrive Eletrônica. A cross-site scripting vulnerability exists in Overdrive Eletrônica course-builder versions prior to 1.8.0, which stems from some unknown functionality in the file coursebuilder/modules/oeditor/oeditor.html, which is...

PT-2023-10228 · Overdrive Eletrônica · Course-Builder

Name of the Vulnerable Software and Affected Versions: Overdrive Eletrônica course-builder versions up to 1.7.x Description: A vulnerability was found in the course-builder, classified as problematic, affecting some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The...

CVE-2015-10049: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionality of the file coursebuilder/modules/oeditor/oeditor.html. The manipulation leads to cross site scripting. The attack may be launched...

CVE-2022-41955

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was discovered in Autolab's MOSS functionalit...

CVE-2022-41956

CVE-2022-41956 affects Autolab (course management system). A file disclosure vulnerability existed in the remote handin feature, allowing an attacker to submit using paths outside the submission directory and view submitted files. The issue was fixed in version 2.10.0. Workarounds included: clear...

CVE-2022-41955

CVE-2022-41955 affects Autolab and specifically its MOSS functionality. A remote code execution vulnerability exists whereby an instructor with access to MOSS could execute code on the server hosting Autolab. The issue has been patched in version 2.10.0. As a workaround, the recommended mitigatio...

CVE-2022-41955 Autolab is vulnerable to remote code execution (RCE) via MOSS functionality

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was discovered in Autolab's MOSS functionalit...