CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

Code injection

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

Default configuration

In Moodle 3.x, course creators are able to change system default settings for courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7532

In Moodle 3.x, course creators are able to change system default settings for courses...

UBUNTU-CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7532

CVE-2017-7532 affects Moodle 3.x. The issue, described as: “In Moodle 3.x, course creators are able to change system default settings for courses,” indicates improper privilege handling that lets non‑administrative users alter default course configurations. CVSS information included with the entr...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7532

In Moodle 3.x, course creators are able to change system default settings for courses...

CVE-2017-7531

Affected software: Moodle 3.3. Vulnerable component: course overview block. Root cause: information disclosure via the course overview block that reveals activities in hidden courses. Impact: potential viewing of hidden-course activities. Public details: CVE-2017-7531 and associated descriptions ...

Information Disclosure

Moodle is vulnerable to information disclosure. Authenticated users can obtain sensitive information through a request for all course feedback within a specific time frame. This can happen because mod/feedback/lib.php doesn't check the mod/feedback:view before displaying recent feedback...

Capability Bypass

Moodle is vulnerable to capability bypass. A malicious user can edit topics without the required permissions when using the course-editing functions...

mga.edu XSS vulnerability

Vulnerable URL: http://www.mga.edu/course-schedule/index.php?quick=SUB=subj=1"...

Today’s File Security is So ’80s, Part 3: Dynamic Peer Groups – 3 Examples from Customer Data

In the first two parts of this series, we discussed why permissions management, the traditional approach to file security, no longer works and introduced a new approach to file security that leverages machine learning to build dynamic peer groups based on how users actually access files. In this...

therapytools.us XSS vulnerability

Vulnerable URL: http://www.therapytools.us/coursearticle.php?courseid=1/-///'/"//--...

Cross-site scripting vulnerability in moodle course management system

Moodle Modular Object-Oriented Dynamic Learning Environment is a software package for creating online courses or websites. A cross-site scripting vulnerability exists in the Moodle course management system due to the program's lax filtering of link content. This allows an attacker to construct...

hwk-luebeck.de XSS vulnerability

Vulnerable URL: https://www.hwk-luebeck.de/service-center/kurse-seminare-finden.html?id=92=fortbildung=view.cgi=1=0==%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E=liste Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

[SECURITY] Fedora 25 Update: moodle-3.1.6-1.fc25

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 24 Update: moodle-3.1.6-1.fc24

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...