CVE-2022-28986

CVE-2022-28986 LMS Doctor 的 "Simple 2FA Plugin for Moodle" 中存在不安全的直接对象引用（IDOR）漏洞 漏洞详情 风险等级：严重 厂商：LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle 披露者：Flaviu Popescu 描述： LMS Doctor 的 Moodle 简易双因素认证插件中存在不安全的直接对象引用（IDOR）漏洞。允许远程攻击者更新其他用户账户的敏感记录，如电子邮件、密码和电话号码。 验证概念：...

CVE-2022-28601

CVE-2022-28601 LMS Doctor 开发的 "Simple 2FA Plugin for Moodle"（Moodle 简易双因素认证插件）中存在一个双因素认证（2FA）绕过漏洞 漏洞详情 风险 : 中 厂商：LMS Doctor - Moodle 简易双因素认证插件 披露者：Flaviu Popescu 描述： 由 "LMS Doctor" 开发的 Moodle 简易双因素认证插件（Simple 2FA Plugin）存在双因素认证绕过漏洞，攻击者可覆盖账户绑定的手机号码。 从而允许其绕过验证的第二阶段。 概念验证： 以下示例展示了使用自行注册的账户进行初始登录的过程。...

CVE-2022-28601

A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism...

CVE-2022-28601

A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism...

CVE-2022-28601

CVE-2022-28601 concerns the Simple 2FA Plugin for Moodle by LMS Doctor. A 2FA bypass exists: remote attackers can overwrite the phone number used for confirmation via profile.php, thus bypassing the phone verification mechanism. The affected component is the Moodle plugin’s 2FA handling; the root...