42 matches found
CVE-2021-36394-Pre-Auth-RCE-in-Moodle
CVE-2021-36394-Pre-Auth-RCE-in-Moodle 취약점 소개 Moodle은 세계에서 가장 인기 있는 학습 관리 시스템입니다. 몇 분 안에 e러닝 웹사이트를 만들어 보세요! Moodle의 Shibboleth 인증 모듈에서 인증되지 않은 원격 코드 실행 취약점이 존재합니다. 이는 대학에서 널리 사용되어 한 대학의 학생들이 다른 대학에서 인증받고 외부 강좌를 수강하며 다른 사람들과 즐길 수 있도록 합니다. 환경 설정 git clone...
EUVD-2012-4423
Malware in sbrugna...
EUVD-2015-3420
Malware in sbrugna...
EUVD-2009-4493
Malware in sbrugna...
EUVD-2022-2005
Malicious code in bioql PyPI...
EUVD-2022-6748
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-20187
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP...
CVE-2021-36394
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...
CVE-2021-20187
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication...
GHSA-2563-FP9C-MGM8 Moodle Session Fixation vulnerability
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...
CVE-2021-36394
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...
CVE-2021-36394
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...
CVE-2021-36394: Session Fixation
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...
CVE-2021-36394
CVE-2021-36394 is described as a remote code execution issue in Moodle’s Shibboleth authentication plugin. The OpenVAS entry lists concrete vulnerable versions of Moodle at risk: < 3.9.8, 3.10.x < 3.10.5, and 3.11.x
Improper Authentication
moodle is using Improper Authentication. The vulnerability exists in logoutdbsession function in helper.php where a session hijack risk was identified in the shibboleth authentication plugin, in which the sessions weren't killed after the user logging out...
CVE-2021-40691
A session hijack risk was identified in the Shibboleth authentication plugin...
CVE-2021-40691
A session hijack risk was identified in the Shibboleth authentication plugin...
Session fixation
A session hijack risk was identified in the Shibboleth authentication plugin...
