1794 matches found
CVE-2012-1170
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough Versions 2.2 to 2.2.1+ affected...
Design/Logic Flaw
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough...
CVE-2012-1170
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough...
CVE-2012-1170
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough...
PT-2019-6746
Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2 Description The issue is related to an external enrolment plugin context check in Moodle, where capability checks are not thorough. Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to...
CVE-2012-1170: Improper Validation of Integrity Check Value
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough...
PT-2019-14451
Name of the Vulnerable Software and Affected Versions LoginPress plugin versions prior to 1.1.4 Description The issue concerns the lack of capability checks for updates to settings in the LoginPress plugin for WordPress. Recommendations For versions prior to 1.1.4, update to version 1.1.4 or late...
Woody Ad Snippets < 2.2.6 - Arbitrary Post Deletion
The adminInit function of the admin/includes/class.actions.snippets.php file, registered as an admininit hook did not have any CSRF or capability checks for its close action, allowing unauthenticated users to delete arbitrary posts from the blog PoC...
CVE-2019-11807
The WooCommerce Checkout Manager plugin before 4.3 for WordPress allows media deletion via the wp-admin/admin-ajax.php?action=updateattachmentwccm wccmdefaultkeysload parameter because of a nopriv registration and a lack of capabilities checks...
CVE-2019-3852
A vulnerability was found in moodle before version 3.6.3. The getwithcapabilityjoin and getusersbycapability functions were not taking context freezing into account when checking user capabilities...
WordPress WP GDPR Compliance Plugin Privilege Escalation
The Wordpress GDPR Compliance plugin use auxiliary/admin/http/wp/gdprcomplianceprivesc msf undefinedgdprcomplianceprivesc show actions ...actions... msf undefinedgdprcomplianceprivesc set ACTION msf undefinedgdprcomplianceprivesc show options ...show and set options... msf...
WordPress 4.1.x < 4.1.18 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...
WordPress 3.7.x < 3.7.21 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...
[SECURITY] [DLA 975-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb7u15 CVE ID : CVE-2017-8295 CVE-2017-9061 CVE-2017-9062 CVE-2017-9063 CVE-2017-9064 CVE-2017-9065 Debian Bug : 862053 862816 Several vulnerabilities were discovered in wordpress, a web blogging tool. The Common Vulnerabilities and Exposures project...
Moodle 2.7.x < 2.7.20 Multiple Vulnerabilities
Binary data 700123.prm...
Moodle 3.0.x < 3.0.10 Multiple Vulnerabilities
Binary data 700124.prm...
Moodle 3.1.x < 3.1.6 Multiple Vulnerabilities
Binary data 700125.prm...
Moodle 3.2.x < 3.2.3 Multiple Vulnerabilities
Binary data 700126.prm...
