Lucene search
+L

31 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:13 a.m.31 views

Moodle Authentication Bypass in Question-Bank

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a savequestion action...

4CVSS6.7AI score0.01414EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/05/13 1:13 a.m.31 views

GHSA-3RQJ-JCHW-9CC7 Moodle Authentication Bypass in Question-Bank

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a savequestion action...

4CVSS5.7AI score0.01414EPSS
SaveExploits0References7
CNVD
CNVD
added 2020/05/08 12:00 a.m.5 views

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System Question Bank Module - New Question Bank Module

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System Question Bank Module -...

7.7AI score
SaveExploits0
Qualys Blog
Qualys Blog
added 2018/07/21 6:57 a.m.44 views

SAQ Enables Users to Pick and Choose Questions for Custom Templates

Qualys Security Assessment Questionnaire SAQ has been enhanced with new features for questionnaire templates, which enable customers to choose questions that they want to include in their campaigns. The new Question Bank option in the SAQ Template Editor provides users with a repository of...

1.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2018/07/12 12:00 a.m.26 views

Moodle CMS <= 3.1.12, 3.2.x, 3.3.x <= 3.3.6, 3.4.x <= 3.4.3, 3.5.0 Multiple Vulnerabilities - Windows

Moodle CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

7.5CVSS6.8AI score0.02137EPSS
SaveExploits0References2
Prion
Prion
added 2018/07/10 6:29 p.m.15 views

Design/Logic Flaw

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank...

7.5CVSS7AI score0.02122EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/07/10 6:29 p.m.20 views

CVE-2018-10891

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank...

7.5CVSS6.6AI score0.02122EPSS
SaveExploits0References3
NVD
NVD
added 2012/07/21 3:38 a.m.18 views

CVE-2012-2356

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a savequestion action...

4CVSS5.9AI score0.01414EPSS
SaveExploits0References2
OSV
OSV
added 2012/07/21 3:38 a.m.10 views

UBUNTU-CVE-2012-2356

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a savequestion action...

4CVSS5.8AI score0.01414EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2012/07/21 1:00 a.m.32 views

CVE-2012-2356

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a savequestion action...

5.9AI score0.01414EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2012/06/04 12:00 a.m.22 views

Fedora 17 : moodle-2.2.3-1.fc17 (2012-8284)

CVE-2012-2353 MSA-12-0024: Hidden information access issue CVE-2012-2354 MSA-12-0025: Personal communication access issue CVE-2012-2355 MSA-12-0026: Quiz capability issue CVE-2012-2356 MSA-12-0027: Question bank capability issues CVE-2012-2357 MSA-12-0028: Insecure authentication issue...

6.5CVSS5.4AI score0.0169EPSS
SaveExploits0References1
Rows per page
Query Builder