Unauthorized Calendar Modification

Moodle is vulnerable to unauthorized calendar modification. The application does not check for capabilities for editing the calendar, allowing a malicious user to delete course level calendar subscription created by teacher users...

Capability Check Bypass

Moodle is vulnerable to capability check bypasses. Authenticated users can bypass capability checks because the isenrolled function in lib/accesslib.php does not correctly interact with the caching feature...

Design/Logic Flaw

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

CVE-2017-7490

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

UBUNTU-CVE-2017-7490

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

CVE-2017-7490

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

CVE-2017-7490

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

CVE-2017-7490

CVE-2017-7490 affects Moodle 2.x and 3.x. The vulnerability arises from a missing capability check that enables searching of arbitrary blogs, exposing potential information that should be restricted. The provided documents describe the flaw as a capability check omission but do not supply additio...

CVE-2017-7490

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

CVE-2017-7490: Exposure of Resource to Wrong Sphere

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...

PT-2017-17767

Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x Description A missing capability check in Moodle allows for the searching of arbitrary blogs. Recommendations For versions 2.x through 3.x, apply the necessary patch or update to include the capability check and...

CVE-2016-3732

The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users...

UBUNTU-CVE-2016-3732

The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users...

CVE-2016-3732

The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users...

CVE-2016-3732

The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users...

CVE-2016-3732

CVE-2016-3732 affects Moodle; impact is that remote authenticated users can read badges of other users due to a capability check flaw. Affected versions include Moodle 3.0 up to 3.0.3, 2.9 up to 2.9.5, 2.8 up to 2.8.11, and 2.7 up to 2.7.13, and earlier. The connected documents confirm the existe...

PT-2017-8416

Name of the Vulnerable Software and Affected Versions Moodle versions 3.0 through 3.0.3 Moodle versions 2.9 through 2.9.5 Moodle versions 2.8 through 2.8.11 Moodle versions 2.7 through 2.7.13 Moodle versions prior to 2.7 Description The issue allows remote authenticated users to read the badges o...

Moodle 2.9.x < 2.9.9 Multiple Vulnerabilities

Binary data 9834.prm...

WordPress Core Ajax handlers CSRF and Directory Traversal Vulnerabilities - Linux

WordPress is prone to CSRF and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Core Ajax handlers CSRF and Directory Traversal Vulnerabilities - Windows

WordPress is prone to CSRF and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...