Moodle 3.0.x < 3.0.10 Multiple Vulnerabilities

Binary data 700124.prm...

Cross-site Request Forgery (CSRF)

Moodle is vulnerable to cross-site request forgery CSRF attacks. Attackers are able to change the "number of courses displayed in the course overview block" configuration setting using this vector...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting attacks. These attacks are possible through the course summary filter on the Add a new course page by passing an attribute to it. Note: This is not going to be fixed by the Moodle team...

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2017-06926)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site request forgery vulnerability exists in Moodle version 2.x and version 3....

CVE-2017-7491

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

UBUNTU-CVE-2017-7491

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

CVE-2017-7491

CVE-2017-7491 affects Moodle 2.x and 3.x and describes a Cross-Site Request Forgery (CSRF) vulnerability that enables an attacker to modify the "number of courses displayed in the course overview block" configuration setting. The entry is supported by multiple connected advisories (GHSA-3HMR-948V...

Radancy: IDOR in editing courses

Description This vulnerability consists in : https://mijn.werkenbijdefensie.nl/instellingen/gegevens/ This vulnerability allows an attacker to edit courses that do not belong to him and remove them from the users account. The edited course ends up in the attackers account, but gets deleted from t...

Learn Practical Hacking Online — Get Training For Just $45!

Due to recent highly publicised hacks and high-profile data breaches, certified hackers are in huge demand and being hired by almost all industry to help them keep their networks protected. These ethical hackers not only gain reputation in the IT industry but are also one of the most well-paid...

Stored Cross-site Scripting Vulnerability in Template/View.aspx Page of Shanghai Excellence Ruixin Digital Technology Co.

Excellence Course Center System is a teaching and learning system specially developed by Shanghai Excellence Ruixin Digital Technology Co. for teaching in colleges and universities. A stored cross-site scripting vulnerability exists in the comments of the Template/View.aspx page of the Excellence...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

Design/Logic Flaw

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

UBUNTU-CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

CVE-2016-3733

CVE-2016-3733 affects Moodle versions: 3.0–3.0.3, 2.9–2.9.5, 2.8–2.8.11, 2.7–2.7.13, and earlier. Root cause: the Moodle “restore teacher” feature allows remote authenticated users to overwrite the course idnumber. Impact: enables modification of a course identifier by an authenticated actor. Exp...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

Get 9 Popular Online Hacking Training Course Package for Just $49

Since the Internet is filled with hackers and cyber criminals keen on hacking networks for valuable information, ethical hackers are in huge demand and being hired by almost every industry to help them keep their networks protected. These ethical hackers, penetration testers, and information...

[SECURITY] Fedora 26 Update: moodle-3.2.2-1.fc26

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 25 Update: moodle-3.1.5-1.fc25

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...