Moodle 2.3.82.4.5 - Multiple Vulnerabilities

Moodle 2.3.82.4.5 - Multiple Vulnerabilities Ciaran McNally Application: Moodle http://download.moodle.org/ Versions: parameter in an rss feed is vulnerable to javascript injection. This blog post is viewable by everyone on moodle and you can link to it directly. Upon clicking the "Link to origin...

joomla1013-csrf.txt

Author: Jose Carlos Nieto. Date: Jan 08, 2008 Severity: Mild There exists a Cross Site Request Forgery security hole in Joomla 1.0.13. Background ========== Joomla! is a free , open source content management system for publishing content on the world wide web and intranets . Joomla! is licensed...

JBlog 1.0 - Create Delete Admin Authentication Bypass

JBlog 1.0 - Create Delete Admin Authentication Bypass xss Here&pcomm=com cookies Manipulation: -------------------- The POST variable 'search' in /jblog/recherche.php also The Cookie variable 'theme' is affected and can be set to : also we can do this : ' or : ' This is a small exemple of Inject...