7174 matches found
UBUNTU-CVE-2012-3392
mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...
Design/Logic Flaw
mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...
CVE-2012-3392
mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...
CVE-2012-3392
mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums...
CVE-2012-3392
Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 is affected by CVE-2012-3392. The issue arises in mod/forum/unsubscribeall.php where the code does not consider whether a forum is optional, allowing remote authenticated users with the student role to bypass forum-subscription requirements by unsu...
CVE-2012-3391
CVE-2012-3391 affects Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4. The issue in mod/forum/rsslib.php arises from not enforcing the posting-before-reading requirement for Q&A forums, enabling remote authenticated users (student role) to bypass access restrictions by reading the RSS feed. The ...
Forum Oxalis <= 0.1.2 SQL Injection Vulnerability
Exploit for php platform in category web applications Forum Oxalis 0.1.2 Vendor information: "Forum Oxalis is a minimalis GPL PHP forum using CSS." Vendor URI: http://developer.berlios.de/projects/forumoxalis/ Risk-level: High The application is prone to a remote SQL injection vulnerability...
CVE-2012-0792
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts...
CVE-2012-0792
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts...
Code injection
Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page...
CVE-2012-0799
Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4 are affected. When an anonymous front-page forum is enabled, remote attackers can obtain session keys for their sessions by visiting the front page. This describes a session-key disclosure vulnerability in Moodle, with impact limited to session con...
PT-2012-2869 · Moodle · Moodle
Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.15 Description: The issue allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts in the mod/forum/user.php file. Recommendations: For Moodle...
Forum Oxalis 0.1.2 - SQL Injection
Forum Oxalis 0.1.2 Vendor information: "Forum Oxalis is a minimalis GPL PHP forum using CSS." Vendor URI: http://developer.berlios.de/projects/forumoxalis/ Risk-level: High The application is prone to a remote SQL injection vulnerability. ------------------------------------- func.php, line 72:...
Forum Oxalis 0.1.2 - SQL Injection
Forum Oxalis 0.1.2 - SQL Injection Forum Oxalis 0.1.2 Vendor information: "Forum Oxalis is a minimalis GPL PHP forum using CSS." Vendor URI: http://developer.berlios.de/projects/forumoxalis/ Risk-level: High The application is prone to a remote SQL injection vulnerability...
PBBoard v2.1.4 CMS - persistent XSS Vulnerabilities
Exploit for php platform in category web applications PBBoard v2.1.4 CMS - persistent XSS Vulnerabilities Introduction: ============= PBBoard forum is a free and very famous flat-forum bulletin board software. - LICENSE: http://www.pbboard.com/manual/license.txt - INSTALL And UPGRADE :...
NVIDIA Developer Forums Hacked, 400000 user accounts at Risk
Nvidia shut down its Developer Zone online forum today after hackers gained access to members' account details.A statement Nvidia posted on the forum reads, "Nvidia suspended operations today of the Nvidia Developer Zone. We did this in response to attacks on the site by unauthorised third partie...
AndroidForums.com Hacked, User Credentials Stolen
An online forum for Android fans and developers was compromised and user account details stolen, according to a notice posted online on Tuesday. Phandroid.com, which operates Androidforums.com told users that hackers had breached a back end database that powers Androidforums.com, an online bullet...
CVE-2011-4308
mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors...
Forum Oxalis 0.1.2 <= SQL Injection Vulnerability
Forum Oxalis 0.1.2 = SQL Injection Vulnerability Discovered by: Jean Pascal Pereira [email protected] Vendor information: "Forum Oxalis is a minimalis GPL PHP forum using CSS." Vendor URI: http://developer.berlios.de/projects/forumoxalis/ Risk-level: High The application is prone to a remote SQL...
Cisco Pulls Back on Routers' 'Supplemental Privacy Policy'
Cisco appears to have retracted a controversial addition to its privacy policy that allowed the company to track data, including complete Internet histories, for users of its Linksys E2700, E3500 and E4500 routers. The policy revisions were part of an automatic firmware update that outraged users...