CVE-2021-36394-Pre-Auth-RCE-in-Moodle

CVE-2021-36394-在Moodle中的预认证远程代码执行漏洞 漏洞简介 Moodle 是世界上最流行的学习管理系统。立即开始创建你的在线学习网站！ Moodle 的 Shibboleth 认证模块存在一个未授权的远程代码执行漏洞。该模块广泛应用于大学，允许一所大学的学生在其他大学进行身份验证，从而选修外部课程并与其他学生互动。 环境搭建 root@kitploit: git clone https://github.com/lavclash75/CVE-2021-36394-Pre-Auth-RCE-in-Moodle.git cd "CVE-2021-36394 Pre-Au...

EUVD-2012-4423

Malware in sbrugna...

EUVD-2009-4493

Malware in sbrugna...

EUVD-2015-3420

Malware in sbrugna...

EUVD-2022-2005

Malicious code in bioql PyPI...

EUVD-2022-6748

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-20187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP...

CVE-2021-36394

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...

CVE-2021-20187

It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication...

GHSA-2563-FP9C-MGM8 Moodle Session Fixation vulnerability

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...

CVE-2021-36394

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...

CVE-2021-36394

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin...

CVE-2021-36394

CVE-2021-36394 is described as a remote code execution issue in Moodle’s Shibboleth authentication plugin. The OpenVAS entry lists concrete vulnerable versions of Moodle at risk: < 3.9.8, 3.10.x < 3.10.5, and 3.11.x

Improper Authentication

moodle is using Improper Authentication. The vulnerability exists in logoutdbsession function in helper.php where a session hijack risk was identified in the shibboleth authentication plugin, in which the sessions weren't killed after the user logging out...

CVE-2021-40691

A session hijack risk was identified in the Shibboleth authentication plugin...

Session fixation

A session hijack risk was identified in the Shibboleth authentication plugin...

CVE-2021-40691

A session hijack risk was identified in the Shibboleth authentication plugin...

Exploit for Code Injection in Moodle

CVE-2021-36394-Pre-Auth-RCE-in-Moodle Vulnerability Introd...

PT-2022-11300 · Shibboleth +1 · Shibboleth Authentication Plugin +1

Name of the Vulnerable Software and Affected Versions: Shibboleth authentication plugin affected versions not specified Description: A session hijack risk was identified in the Shibboleth authentication plugin. Recommendations: At the moment, there is no information about a newer version that...

The vulnerability of the Shibboleth authentication technology lies in the false representation of critical information to the user interface, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Shibboleth authentication technology is related to the false representation of critical information to the user interface. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...