CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

CVE-2017-7298

CVE-2017-7298 affects Moodle 3.2.2+ via a cross-site scripting vulnerability in the Course summary filter on the Add a new course page. The issue is triggered by crafted SVG attributes, enabling potential injection. Public details in connected documents reiterate the XSS in Moodle 3.2.2+ but do n...

CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

Bejtlich Moves On

Exactly six years ago today I announced that I was joining Mandiant to become the company's first CSO. Today is my last day at FireEye, the company that bought Mandiant at the very end of 2013. The highlights of my time at Mandiant involved two sets of responsibilities. First, as CSO, I enjoyed...

gla.ac.uk XSS vulnerability

Vulnerable URL: http://www.gla.ac.uk/coursecatalogue/course/?code=x%27%3E%3CsvG%20onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

THN Deal: Complete Linux Certification Training (Save 97%)

If you are also searching for the answers to what skills are needed for a job in cyber security, you should know that this varies widely based upon the responsibilities of a particular role, the type of company you want to work with, and especially on it’s IT architect. However, Linux is the most...

[SECURITY] Fedora 25 Update: moodle-3.1.4-1.fc25

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

The vulnerability of the Moodle learning management system allows a hacker to escalate their privileges.

The vulnerability in checking the course status of the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

[SECURITY] Fedora 24 Update: moodle-3.1.4-1.fc24

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

CVE-2016-5014

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course...

CVE-2016-8644

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...

CVE-2016-5014

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course...

UBUNTU-CVE-2016-8644

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...

CVE-2016-8644

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...

CVE-2016-8644

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...

CVE-2016-8644

CVE-2016-8644 affects Moodle 2.x and 3.x where the permission to view course notes is checked in the wrong context, constituting an access control flaw. The root cause, per the sources, is improper context checking for the view-course-notes capability, potentially enabling partial information dis...

Moodle 2.7.x < 2.7.17 Multiple Vulnerabilities

Binary data 9832.prm...

Moodle 3.1.x < 3.1.3 Multiple Vulnerabilities

Binary data 9838.prm...

SQL Injection Vulnerability in Pisces Forest PHP Based MVC Faculty Selection Grade Management System

Pisces forest PHP based MVC faculty elective course grade management system is based on a three-tier model to develop faculty elective course grade management system. SQL injection vulnerability exists in the PHP based MVC Academic Record Management System ARMS. The vulnerability allows attackers...

[SECURITY] Fedora 24 Update: moodle-3.1.3-1.fc24

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...