2200 matches found
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7532
CVE-2017-7532 affects Moodle 3.x. The issue, described as: “In Moodle 3.x, course creators are able to change system default settings for courses,” indicates improper privilege handling that lets non‑administrative users alter default course configurations. CVSS information included with the entr...
CVE-2017-7531
Affected software: Moodle 3.3. Vulnerable component: course overview block. Root cause: information disclosure via the course overview block that reveals activities in hidden courses. Impact: potential viewing of hidden-course activities. Public details: CVE-2017-7531 and associated descriptions ...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
Information Disclosure
Moodle is vulnerable to information disclosure. Authenticated users can obtain sensitive information through a request for all course feedback within a specific time frame. This can happen because mod/feedback/lib.php doesn't check the mod/feedback:view before displaying recent feedback...
Capability Bypass
Moodle is vulnerable to capability bypass. A malicious user can edit topics without the required permissions when using the course-editing functions...
mga.edu XSS vulnerability
Vulnerable URL: http://www.mga.edu/course-schedule/index.php?quick=SUB=subj=1"...
Today’s File Security is So ’80s, Part 3: Dynamic Peer Groups – 3 Examples from Customer Data
In the first two parts of this series, we discussed why permissions management, the traditional approach to file security, no longer works and introduced a new approach to file security that leverages machine learning to build dynamic peer groups based on how users actually access files. In this...
therapytools.us XSS vulnerability
Vulnerable URL: http://www.therapytools.us/coursearticle.php?courseid=1/-///'/"//--...
Cross-site scripting vulnerability in moodle course management system
Moodle Modular Object-Oriented Dynamic Learning Environment is a software package for creating online courses or websites. A cross-site scripting vulnerability exists in the Moodle course management system due to the program's lax filtering of link content. This allows an attacker to construct...
hwk-luebeck.de XSS vulnerability
Vulnerable URL: https://www.hwk-luebeck.de/service-center/kurse-seminare-finden.html?id=92=fortbildung=view.cgi=1=0==%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E=liste Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...
[SECURITY] Fedora 25 Update: moodle-3.1.6-1.fc25
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
[SECURITY] Fedora 24 Update: moodle-3.1.6-1.fc24
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
Moodle 3.0.x < 3.0.10 Multiple Vulnerabilities
Binary data 700124.prm...
Cross-site Request Forgery (CSRF)
Moodle is vulnerable to cross-site request forgery CSRF attacks. Attackers are able to change the "number of courses displayed in the course overview block" configuration setting using this vector...
Cross-site Scripting (XSS)
Moodle is vulnerable to cross-site scripting attacks. These attacks are possible through the course summary filter on the Add a new course page by passing an attribute to it. Note: This is not going to be fixed by the Moodle team...
Moodle Cross-Site Request Forgery Vulnerability (CNVD-2017-06926)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site request forgery vulnerability exists in Moodle version 2.x and version 3....