3 matches found
Default configuration
The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role...
CVE-2011-4285
The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role...
PT-2012-1833
Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.0 through 2.0.1 Moodle version 2.0.2 is not affected, but since the range is specified as 'before 2.0.2', we can simplify to: Moodle versions prior to 2.0.2 Description The issue is related to an incorrect setting of the...