Lucene search
+L

2739 matches found

CNNVD
CNNVD
added 2024/12/02 12:00 a.m.10 views

WordPress plugin Watu Quiz SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.8CVSS9AI score0.00468EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/11/29 5:44 p.m.10 views

WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Trương Hữu Phúc Patchstack Alliance in WordPress Plugin Watu Quiz versions = 3.4.1.2...

8.8CVSS8.1AI score0.00468EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/22 2:01 p.m.9 views

WordPress AI Quiz plugin <= 1.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin AI Quiz versions = 1.1...

5.3CVSS7AI score0.00552EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/11/22 12:00 a.m.21 views

WordPress AI Quiz Plugin <= 1.1 is vulnerable to Broken Access Control

Software AI Quiz Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-53708 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6ee310016b7b Credits Mika Required privilege Unauthenticated...

6.5AI score0.00552EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/11/19 5:15 p.m.15 views

CVE-2024-49689

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

5.4CVSS0.00476EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:30 p.m.51 views

CVE-2024-49689

CVE-2024-49689 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin HD Quiz – Save Results Light (versions ≤ 0.5). The issue arises from incorrectly configured access control levels, enabling unauthorized access due to a broken authorization boundary. CVSS v3.1...

5.4CVSS5.9AI score0.00476EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:30 p.m.13 views

CVE-2024-49689 WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

5.4CVSS5.9AI score0.00476EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:30 p.m.29 views

CVE-2024-49689 WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

5.4CVSS0.00476EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/11 3:31 p.m.18 views

GHSA-JPF2-9PPP-2C49 Moodle has insufficient access control

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

6.9CVSS5AI score0.00327EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/11/11 3:31 p.m.30 views

Moodle has insufficient access control

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

5.3CVSS6.6AI score0.00327EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/11/11 1:15 p.m.26 views

CVE-2024-43430

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

5.3CVSS0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/11 1:15 p.m.4 views

UBUNTU-CVE-2024-43430

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

5.3CVSS5.7AI score0.00327EPSS
SaveExploits0References4
Snyk
Snyk
added 2024/11/11 12:47 p.m.8 views

Access Control Bypass

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Access Control Bypass due to insufficient access control mechanisms implemented in the external API for quiz overrides. Remediation Upgrade moodle/moodle to version 4.4.2 or higher. References -...

6.9CVSS6.9AI score0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/11 12:15 p.m.15 views

CVE-2024-43430 Moodle: lack of access control when using external methods for quiz overrides

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

5.3CVSS5.9AI score
SaveExploits0References5
CVE
CVE
added 2024/11/11 12:15 p.m.118 views

CVE-2024-43430

Mode C: The CVE-2024-43430 entry concerns Moodle and describes an access-control weakness where external API access to Quiz can override contained access control. The connected documents reiterate Moodle-related details (external API for Quiz, insufficient access control) but do not specify affec...

5.3CVSS5.1AI score0.00327EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/11/11 12:15 p.m.33 views

CVE-2024-43430 Moodle: lack of access control when using external methods for quiz overrides

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

5.3CVSS0.00327EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/11/11 12:15 p.m.17 views

CVE-2024-43430 Moodle: lack of access control when using external methods for quiz overrides

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control...

5.3CVSS6.7AI score0.00327EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.11 views

PT-2024-30580 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: moodle affected versions not specified Description: A flaw was found in moodle, where external API access to Quiz can override contained insufficient access control. Recommendations: At the moment, there is no information about a newer versio...

8.8CVSS5.5AI score0.87363EPSS
SaveExploits8References76
NVD
NVD
added 2024/11/01 3:15 p.m.36 views

CVE-2024-37921

Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chained Quiz: from n/a through 1.3.2.8...

5.3CVSS0.00381EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.17 views

CVE-2024-37921 WordPress Chained Quiz plugin <= 1.3.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chained Quiz: from n/a through 1.3.2.8...

5.3CVSS6.9AI score0.00381EPSS
SaveExploits0References1
Rows per page
Query Builder