7174 matches found
mywed.ru XSS vulnerability
Vulnerable URL: http://www.mywed.ru/forum// Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 55963 Google Pagerank| 4 VIP website status:| No Check mywed.ru...
The vulnerability of the Moodle learning management system allows a hacker to bypass existing access restrictions.
The vulnerability of the mod/forum/post.php function in the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to circumvent existing access restrictions through group-based authenticatio...
The vulnerability of the Moodle learning management system allows a hacker to modify data within arbitrary groups.
The vulnerability of the Moodle learning management system’s Forum module is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify data within arbitrary groups, thereby increasing their own influence as “teachers”...
forum.vgd.ru XSS vulnerability
Vulnerable URL: http://forum.vgd.ru/signin/first.php?refr=" Details: Description| Value ---|--- Patched:| Yes, at 07.07.2016 Latest check for patch:| 07.07.2016 20:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5 VIP...
scout.com XSS vulnerability
Vulnerable URL: http://www.scout.com/forums/search?type=forum-messages=124124==alert/XSSPOSED/...
[SECURITY] Fedora 22 Update: php-htmLawed-1.1.21-1.fc22
PHP code to purify and filter HTML make HTML markup in text secure and standard-compliant process text for use in HTML, XHTML or XML documents restrict HTML elements, attributes or URL protocols using black or white-lists balance tags, check element nesting, transform deprecated attributes and...
lab.vodafone.it XSS vulnerability
Vulnerable URL: http://lab.vodafone.it/forum/viewtopic.php?f=18=8374=45&d6a;=...
MyBB Detection (MyBulletinBoard Forum)
Binary data 9125.prm...
Ramui Forum Script 9.0 - SQL Injection Exploit
No description provided by source...
KingCms k9版 /apps/forum/board.php 注入漏洞
No description provided by source...
eFront Learning CMS 3.6.15.6 Cross Site Scripting
Document Title: =============== eFront Learning 3.6.15.6 CMS - Forum Persistent Title Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1761 Release Date: ============= 2016-02-23 Vulnerability Laboratory ID VL-ID:...
Linux Mint Website Hacked, ISOs Replaced with Backdoored Versions
Attackers managed to hijack the website of the Linux Mint operating system to push a backdoored ISO image of the software to users over the weekend. The developers behind the software, one of, if not the most popular Linux distribution, are unsure what the hackers are aiming to achieve by the mov...
CVE-2015-5272
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...
Code injection
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...
CVE-2015-5272
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...
CVE-2015-3273
mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization...
Authorization
mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization...
UBUNTU-CVE-2015-5272
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...
CVE-2015-5272
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."...
CVE-2015-5272
Summary: CVE-2015-5272 affects Moodle 2.7.x (before 2.7.10). The Forum module allows remote authenticated users to post to arbitrary groups by leveraging the teacher role (e.g., a post directed to “all participants”). Affected software: Moodle Forum component in Moodle 2.7.x; fixed in 2.7.10 (per...