Lucene search
+L

7174 matches found

Openbugbounty
Openbugbounty
added 2016/03/17 9:14 a.m.16 views

mywed.ru XSS vulnerability

Vulnerable URL: http://www.mywed.ru/forum// Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 55963 Google Pagerank| 4 VIP website status:| No Check mywed.ru...

6.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:00 a.m.13 views

The vulnerability of the Moodle learning management system allows a hacker to bypass existing access restrictions.

The vulnerability of the mod/forum/post.php function in the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to circumvent existing access restrictions through group-based authenticatio...

4CVSS6.4AI score0.015EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:00 a.m.13 views

The vulnerability of the Moodle learning management system allows a hacker to modify data within arbitrary groups.

The vulnerability of the Moodle learning management system’s Forum module is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify data within arbitrary groups, thereby increasing their own influence as “teachers”...

4CVSS6.3AI score0.01504EPSS
SaveExploits0References4Affected Software1
Openbugbounty
Openbugbounty
added 2016/03/16 5:11 p.m.9 views

forum.vgd.ru XSS vulnerability

Vulnerable URL: http://forum.vgd.ru/signin/first.php?refr=" Details: Description| Value ---|--- Patched:| Yes, at 07.07.2016 Latest check for patch:| 07.07.2016 20:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5 VIP...

6.3AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2016/03/15 6:59 p.m.13 views

scout.com XSS vulnerability

Vulnerable URL: http://www.scout.com/forums/search?type=forum-messages=124124==alert/XSSPOSED/...

6.9AI score
SaveExploits0
Fedora
Fedora
added 2016/03/12 12:53 a.m.21 views

[SECURITY] Fedora 22 Update: php-htmLawed-1.1.21-1.fc22

PHP code to purify and filter HTML make HTML markup in text secure and standard-compliant process text for use in HTML, XHTML or XML documents restrict HTML elements, attributes or URL protocols using black or white-lists balance tags, check element nesting, transform deprecated attributes and...

6.6AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2016/03/09 9:28 a.m.20 views

lab.vodafone.it XSS vulnerability

Vulnerable URL: http://lab.vodafone.it/forum/viewtopic.php?f=18=8374=45&d6a;=...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/03/02 12:00 a.m.20 views

MyBB Detection (MyBulletinBoard Forum)

Binary data 9125.prm...

7.3AI score
SaveExploits0References2
seebug.org
seebug.org
added 2016/03/02 12:00 a.m.19 views

Ramui Forum Script 9.0 - SQL Injection Exploit

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2016/02/29 12:00 a.m.22 views

KingCms k9版 /apps/forum/board.php 注入漏洞

No description provided by source...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2016/02/25 12:00 a.m.34 views

eFront Learning CMS 3.6.15.6 Cross Site Scripting

Document Title: =============== eFront Learning 3.6.15.6 CMS - Forum Persistent Title Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID:...

0.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2016/02/22 12:00 p.m.12 views

Linux Mint Website Hacked, ISOs Replaced with Backdoored Versions

Attackers managed to hijack the website of the Linux Mint operating system to push a backdoored ISO image of the software to users over the weekend. The developers behind the software, one of, if not the most popular Linux distribution, are unsure what the hackers are aiming to achieve by the mov...

SaveExploits0References6
NVD
NVD
added 2016/02/22 5:59 a.m.30 views

CVE-2015-5272

The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...

4.3CVSS5.7AI score0.01504EPSS
SaveExploits0References4
Prion
Prion
added 2016/02/22 5:59 a.m.14 views

Code injection

The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...

4CVSS6.7AI score0.01504EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2016/02/22 5:59 a.m.22 views

CVE-2015-5272

The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...

4.3CVSS6.9AI score0.01504EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2016/02/22 5:59 a.m.19 views

CVE-2015-3273

mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization...

4.3CVSS6.8AI score0.015EPSS
SaveExploits0References3
Prion
Prion
added 2016/02/22 5:59 a.m.24 views

Authorization

mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization...

4CVSS6.6AI score0.015EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2016/02/22 5:59 a.m.9 views

UBUNTU-CVE-2015-5272

The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...

4.3CVSS6.8AI score0.01504EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2016/02/22 2:00 a.m.33 views

CVE-2015-5272

The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...

5.6AI score0.01504EPSS
SaveExploits0References4
CVE
CVE
added 2016/02/22 2:00 a.m.60 views

CVE-2015-5272

Summary: CVE-2015-5272 affects Moodle 2.7.x (before 2.7.10). The Forum module allows remote authenticated users to post to arbitrary groups by leveraging the teacher role (e.g., a post directed to “all participants”). Affected software: Moodle Forum component in Moodle 2.7.x; fixed in 2.7.10 (per...

4.3CVSS5.2AI score0.01504EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder