CVE-2014-7832

mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by...

[SECURITY] Fedora 21 Update: moodle-2.7.2-1.fc21

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 20 Update: moodle-2.5.7-1.fc20

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 19 Update: moodle-2.4.11-1.fc19

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Dokeos <= 1.8.0 (my_progress.php course) Remote SQL Injection Exploit

No description provided by source...

eFront 3.6.14 (build 18012) - Stored XSS in Multiple Parameters

No description provided by source. Exploit-DB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage: http://www.efrontlearning.net/ vulnerable app...

Blackboard Learning System 6.0 Dropbox File Download Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10515/info It is reported that Blackboard improperly allows users to download files posted in the 'Digital Dropbox'. Files in the dropbox are intended for the course administrators. The application does not verify that th...

Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit

No description provided by source. !/usr/bin/perl Monster Top List = 1.4.2 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://www.monstertoplist.com Exploit: http://site.com/path/sources/functions.php?rootpath=EvilScript coded and f0und3d by fluffybunny Romania...

course registration management system 2.1 - Multiple Vulnerabilities

No description provided by source. Source: http://packetstormsecurity.org/files/view/98650/CourseMS2.1-LFI.txt ------------------------------------------------------------------------ Software................Course MS 2.1 Vulnerability...........Local File Inclusion...

[SECURITY] Fedora 20 Update: moodle-2.5.6-1.fc20

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

多个学校教职工密码是弱口令

简要描述： 最近闲来无事，又要考试了，逛了下学校官网，搜了下我们英语老师的课表，居然出了老师的工号，于是尝试登录，果然进了。 详细说明： 学校官网：www.scatc.net GOOGLE:inurl:/jwweb/ 发现用这个系统的有很多学校 打开教师课表，搜索老师的课表，就可以知道老师的工号，用初始密码即可登录成功， 漏洞证明： https://images.seebug.org/upload/201405/19133942899f8d9355f3c2f50ef99ef0b4...

Fedora Update for moodle FEDORA-2014-4163

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2014-4163 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for moodle FEDORA-2014-4152

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2014-4152 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 20 Update: moodle-2.5.5-1.fc20

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 19 Update: moodle-2.4.9-1.fc19

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Moodle 2.6.1 Cross Site Scripting

============================================================== Title ...| Moodle 2.6.1 Version .| Feb 27 2014 moodle-latest-26.zip Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| http://download.moodle.org ============================================================== + From admin user:...

Fedora Update for moodle FEDORA-2014-1377

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2014-1377 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 19 Update: moodle-2.4.8-1.fc19

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

eFront 3.6.14 Cross Site Scripting

EDB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage: http://www.efrontlearning.net/ vulnerable app link:http://www.efrontlearning.net/download POC by sajit...

eFront 3.6.14 Cross Site Scripting Vulnerability

eFront version 3.6.14 build 18012 suffers from multiple stored cross site scripting vulnerabilities. EDB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage:...