47 matches found
Moodle-authenticated-RCE
Moodle 4.4.0 - 인증된 원격 코드 실행 CVE-2024-43425 익스플로잇 CVE: CVE-2024-43425 영향을 받는 버전 Moodle 4.4 4.4.1 Moodle 4.3 4.3.5 Moodle 4.2 4.2.8 Moodle 4.1 4.1.11 설명 이 익스플로잇은 위에 나열된 Moodle 버전에서 인증된 원격 코드 실행RCE 취약점을 대상으로 합니다. 유효한 자격 증명을 가진 공격자가 안전하지 않은 문제 은행 편집 기능을 악용하여 서버에서 임의의 명령을 실행할 수 있습니다. 사용 방법 1. 이 저장소를...
CVE-2022-35650
CVE-2022-35650 이것은 Moodle에서의 임의 파일 읽기 취약점입니다. 사전 요구 사항 교사 또는 관리자 수준 사용자의 계정을 탈취해야 합니다. 단계 1. 이 저장소를 클론하세요: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. 익스플로잇을 압축하기 위해 다음 명령을 실행하세요: zip exploit.zip imsmanifest.xml pool.dat 3. 계정에 쓰기 권한이 있는 강좌로 이동하세요. 4. '문제은행'으로 이동하세요. 5. 드롭다운에서...
Linux Distros Unpatched Vulnerability : CVE-2026-102578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries,...
CVE-2026-102578
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
UBUNTU-CVE-2026-102578
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578 Moodle: sql injection in question bank web service
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578
A SQL injection vulnerability exists in the Moodle learning management system. An authenticated attacker who has access to the question bank web service can submit unsanitized input that is directly processed into database queries. This flaw allows the attacker to view, alter, or delete sensitive...
CVE-2026-102578 Moodle: sql injection in question bank web service
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578 Moodle: sql injection in question bank web service
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
EUVD-2026-89717
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578: Improper Neutralization of Special Elements used in an SQL Command
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
PT-2026-103086
Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, leading to a SQL Structured Query Language injection. This...
WordPress LearnPress plugin 4.2.9-4.4.6 - Unauthenticated Question Bank Disclosure vulnerability
Unauthenticated Question Bank Disclosure vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin LearnPress versions 4.2.9-4.4.6...
CVE-2026-86445 LearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajax
The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated attackers to retrieve the text, identifier and type of every published quiz question on the site, along with a keyword search over them, whi...
CVE-2026-79615 Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR
The Quiz and Survey Master QSM WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other...
EUVD-2022-2237
Malicious code in bioql PyPI...
EUVD-2025-4271
Malicious code in bioql PyPI...