2695 matches found
Opencast < 7.6.0 and 8.0.0 Multiple Vulnerabilities
Opencast is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GHSA-94QW-R73X-J7HG Users with ROLE_COURSE_ADMIN can create new users in Opencast
Impact Users with the role ROLECOURSEADMIN can use the user-utils endpoint to create new users not including the role ROLEADMIN. For example: bash Use the admin to create a new user with ROLECOURSEADMIN using the admin user. We expect this to work. % curl -i -u admin:opencast...
PT-2020-18327
Name of the Vulnerable Software and Affected Versions Opencast versions prior to 7.6 Opencast versions prior to 8.1 Description The issue allows users with the role ROLE COURSE ADMIN to create new users not including the role ROLE ADMIN using the "user-utils" endpoint. ROLE COURSE ADMIN is a...
trainingcourseexperts.wa.edu.au Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1075616 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Semrush: IDOR in semrush academy
INTRODUCTION I used two accounts to search for this vulnerability: - id: 5410425 email: ████[email protected] - id: 5407773 email: ████@anosimple.com IP used: ███ Endpoint URL: https://www.semrush.com/academy/courses/userEnroll EXPLOITATION Description of Security Issue: When a user clicks on the...
Online Course Registration 2.0 - Remote Code Execution Exploit
Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0...
Online Course Registration 2.0 Remote Code Execution
Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0 Category: Webapps Tested on: Xampp for Windows...
PT-2020-9945
Name of the Vulnerable Software and Affected Versions Moodle versions 3.7.2 and earlier Description The issue allows authenticated users, such as those with a Teacher role or above, to inject JavaScript into another user's session, including enrolled students or site administrators, via the...
Design/Logic Flaw
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results...
CVE-2012-1161
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results...
CVE-2012-1156
Moodle before 2.2.2 has users' private files included in course backups...
Design/Logic Flaw
Moodle before 2.2.2 has users' private files included in course backups...
CVE-2012-1156
Moodle before 2.2.2 has users' private files included in course backups...
CVE-2012-1156
Moodle before 2.2.2 has users' private files included in course backups...
PT-2019-6738
Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Moodle version 2.1.5 Moodle version 2.0.8 Description The issue concerns the unnecessary inclusion of users' private files in course backups. This affects the confidentiality of user data. Recommendations For...
PT-2019-6741
Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Description The issue allows users to see hidden courses through the overview report and is also vulnerable to information disclosure because course backups include users' private files. Recommendations For...
CVE-2012-1156: Insertion of Sensitive Information into Log File
Moodle before 2.2.2 has users' private files included in course backups...
XSS Vulnerability in ED01-CMS
ED01-CMS is a content management system and the CMS project of Edwin Diaz's Udemy course "PHP for Beginners - Become a PHP Master". An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...
Unauthorized Access Vulnerability in Course Center of Excellence
Premier Education is an educational organization that provides one-on-one tuition for primary and secondary school students and has tutorial classes in several subjects. An unauthorized access vulnerability exists in the Excellence Course Center, which can be exploited to gain unauthorized access...
PT-2020-14896 · Moodle +1 · Moodle +1
Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7.2 Description: The issue concerns information exposure of service tokens for users enrolled in the same course. Recommendations: For versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue...