2695 matches found
PT-2022-2039 · Moodle +2 · Moodle +2
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to insufficient access control in the virtual learning environment. It allows users with the capability to configure badge criteria, such as teachers and managers by...
CVE-2021-25006
The MOLIE WordPress plugin through 0.5 does not escape the courseid parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
CVE-2021-25006
The MOLIE WordPress plugin through 0.5 does not escape the courseid parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue...
WordPress plugin 跨站脚本漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress MOLIE plugin has a cross-site scripting vulnerability that stems from not escaping the courseid parameter before...
PT-2022-9563
Name of the Vulnerable Software and Affected Versions MOLIE WordPress plugin versions 0.5 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the course id parameter is not properly escaped before being outputted back in the admin dashboard...
CVE-2021-32472
Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...
UBUNTU-CVE-2021-32472
Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...
CVE-2021-25029
The CLUEVO LMS, E-Learning Platform WordPress plugin before 1.8.1 does not sanitise and escape Course's module, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2021-25029: Improper Neutralization of Input During Web Page Generation
The CLUEVO LMS, E-Learning Platform WordPress plugin before 1.8.1 does not sanitise and escape Course's module, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
Wordpress Plugin CLUEVO LMS, E-Learning Platform 跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...
CVE-2020-36064
Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...
CVE-2020-36064
Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...
CVE-2020-36064
Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...
Hardcoded credentials
Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...
CVE-2020-36064
Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...
CVE-2020-36064
Online Course Registration v1.0 is affected by hardcoded credentials in the source code, enabling attackers to access the control panel if credentials are exposed. The CVE description and linked sources confirm this root cause and impact. No remediation or patched version is provided in the avail...
Online Course Registration 信任管理问题漏洞
Online Course Registration is a PHP and MySQL based online course registration system from the PHPGurukul Phpgurukul team. A trust management issue vulnerability exists in Online Course Registration, which stems from hard-coded certificates included in the product source code, and can be exploite...
PT-2022-8947
Name of the Vulnerable Software and Affected Versions Online Course Registration version 1.0 Description The issue concerns hardcoded credentials in the source code of the software, which could allow attackers to access the control panel if compromised. Recommendations For Online Course...
CVE-2020-36064: Use of Hard-coded Credentials
Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...