Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unblock a user...

CVE-2012-1633

Cross-site request forgery CSRF vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unblock a user...

CVE-2012-1632

CVE-2012-1632 affects the Drupal Password Policy module. The vulnerability is a cross-site scripting (XSS) flaw in password_policy.admin.inc that allows remote authenticated users with the administer policies permission to inject arbitrary web script or HTML via the name parameter. Affected versi...

CVE-2012-1633

CVE-2012-1633 affects Drupal via the Password Policy module (6.x-1.x prior to 6.x-1.4 and 7.x-1.0 beta3). The vulnerability is a Cross-site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of administrative users for requests that unblock a user. Impact is administ...

CVE-2012-1632: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in passwordpolicy.admin.inc in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote authenticated users with administer policies permissions to inject arbitrary web script or HTML via the name parameter...

CVE-2012-1633: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unblock a user...

CVE-2012-1632

Cross-site scripting XSS vulnerability in passwordpolicy.admin.inc in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote authenticated users with administer policies permissions to inject arbitrary web script or HTML via the name parameter...

CVE-2011-4587

lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable...

CVE-2011-4587

lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable...

Design/Logic Flaw

lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable...

CVE-2011-4587

CVE-2011-4587 affects Moodle: the advisory describes a vulnerability in lib/moodlelib.php where certain zero values in the password policy are not handled correctly, enabling remote attackers to gain access by leveraging the existence of user accounts with blank passwords. Affected versions are M...

CVE-2011-4587

lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable...

PT-2012-1919 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.14 Moodle versions 2.0.x through 2.0.5 Moodle versions 2.1.x through 2.1.2 Description: The issue makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts th...

CVE-2011-4587: Undefined Security Weakness

lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable...

CVE-2011-4287: Undefined Security Weakness

admin/uploaduserform.php in Moodle 2.0.x before 2.0.3 does not force password changes for autosubscribed users, which makes it easier for remote attackers to obtain access by leveraging knowledge of the initial password of a new user...

CVE-2012-1684

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy...

CVE-2012-1684

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy...

CVE-2012-1684

CVE-2012-1684 is a vulnerability in the Password Policy component of Oracle Sun Solaris (versions 8, 9, 10, 11). The connected Nessus/NASL details confirm that affected platforms include Solaris SPARC and x86, with the flaw described as easily exploitable and requiring at least logon to the OS pl...

CVE-2012-1684: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy...