SUSE CVE-2015-5340

Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not consider the moodle/badges:viewbadges capability, which allows remote authenticated users to obtain sensitive badge information via a request involving 1 badges/overview.php or 2 badges/view.php...

Discourse 2.9.x < 2.9.0.beta10 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2022-39378 Displaying user badges can leak topic titles to users that have no access to the topic

Discourse is a platform for community discussion. Under certain conditions, a user badge may have been awarded based on a user's activity in a topic with restricted access. Before this vulnerability was disclosed, the topic title of the topic associated with the user badge may be viewed by any...

September 30, 2022—KB5017389 (OS Build 22621.608) Preview

None None...

CVE-2022-34178

Jenkins Embeddable Build Status Plugin 2.0.3 allows specifying a 'link' query parameter that build status badges will link to, without restricting possible values, resulting in a reflected cross-site scripting XSS vulnerability...

CVE-2022-1791

The One Click Plugin Updater WordPress plugin through 2.4.14 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and disable / hide the badge of the available updates and the related check...

LinkedIn: IDOR - Delete technical skill assessment result & Gained Badges result of any user

The web app is vulnerable to IDOR at DELETE /voyager/api/voyagerAssessmentsDashSkillAssessmentAttemptReports/urn%3Ali%3AfsdskillAssessmentAttemptReport%3Aurn%3Ali%3Afsdprofile%███%2Curn%3Ali%3Askill%3A280%2C1 HTTP request. Allows an attacker to delete the skill assessment result of any user's...

Vulnerability of the moodle/badges:configurecriteria implementation in the virtual learning environment Moodle, which allows a violator to execute arbitrary SQL code

The vulnerability of the moodle/badges:configurecriteria implementation in the virtual learning environment Moodle is related to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code by...

SQL Injection

Moodle is vulnerable to SQL injection. An attacker is able to inject malicious SQL script via Badges code relating to configuring criteria as it fails to validate profile criteria when reviewing...

SQL injection in moodle

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

GHSA-69C3-5XXF-58Q2 SQL injection in moodle

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

UBUNTU-CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

Sql injection

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

CVE-2022-30599

CVE-2022-30599 – Moodle SQL injection in Badges criteria . Affected software: Moodle. The vulnerability is a flaw in the Badges feature where configuring criteria allows an SQL injection (root cause: unsafe SQL in badges code). Impact as stated: high severity with and CI/DI/AI reported as high in...

CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

CVE-2022-30599

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria...

GHSA-JP4G-R8C9-3534 Moodle Blind SSRF Risk in /badges/mybackpack.php

A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it should be restricted to the Mozilla Open Badges backpack URL. This resulted in the possibility of blind SSRF via requests made by the page...