Design/Logic Flaw

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

CVE-2017-2645

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2645

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

CVE-2017-2645

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2644

CVE-2017-2644 affects Moodle 3.x and enables cross-site scripting via evidence of prior learning. It is a network‑based XSS with no authentication, requiring user interaction per CVSS, and results in partial integrity impact and low confidentiality impact. Public details indicate multiple advisor...

CVE-2017-2645

CVE-2017-2645 describes an XSS vulnerability in Moodle 3.x, triggerable through attachments to evidence of prior learning. The entry specifies a cross-site scripting flaw with a CVSS base score of 4.3 (NVD CVSS2) and 6.1 (CVSS3), indicating network access, no authentication, and user interaction ...

CVE-2017-2645

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2644: Improper Neutralization of Input During Web Page Generation

In Moodle 3.x, XSS can occur via evidence of prior learning...

PT-2017-15463

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description A cross-site scripting XSS issue can occur via attachments to evidence of prior learning, allowing for potential exploitation. Recommendations For Moodle versions 3.x, update to a version that includes a fix for...

PT-2017-15462

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description A cross-site scripting XSS issue can occur in Moodle via evidence of prior learning, allowing for potential malicious script execution. Recommendations For Moodle versions 3.x, update to a version that includes ...

CVE-2017-2645: Improper Neutralization of Input During Web Page Generation

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

Moodle 3.2.x < 3.2.2 Multiple Vulnerabilities

Binary data 700011.prm...

DOJ Dismisses Playpen Case to Keep Tor Hack Private

Intent on keeping details private about how it hacked the Tor browser, prosecutors with the U.S. Department of Justice on Friday asked to dismiss a case involving a suspect who visited the Playpen dark web child pornography site in 2015. “The government must now choose between disclosure of...

US Voting Systems Deemed Critical Infrastructure

The Department of Homeland Security has designated the U.S. voting infrastructure, including voting machines and registration databases, as critical infrastructure. On Friday, Secretary Jeh Johnson elevated the voting infrastructure to a critical infrastructure subsector under the existing...

Hacker who exposed Steubenville Rape Faces longer Prison term than Rapists

Remember Steubenville High School Rape Case? In 2012, Steubenville Ohio high school's football team players gang-raped an unconscious teenage girl from West Virginia and took photographs of the sexual assault. In December 2012, a member of the hacker collective Anonymous hacked into the...