2165 matches found
CVE-2016-8644
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...
CVE-2016-8644
CVE-2016-8644 affects Moodle 2.x and 3.x where the permission to view course notes is checked in the wrong context, constituting an access control flaw. The root cause, per the sources, is improper context checking for the view-course-notes capability, potentially enabling partial information dis...
Moodle 2.7.x < 2.7.17 Multiple Vulnerabilities
Binary data 9832.prm...
Moodle 3.1.x < 3.1.3 Multiple Vulnerabilities
Binary data 9838.prm...
SQL Injection Vulnerability in Pisces Forest PHP Based MVC Faculty Selection Grade Management System
Pisces forest PHP based MVC faculty elective course grade management system is based on a three-tier model to develop faculty elective course grade management system. SQL injection vulnerability exists in the PHP based MVC Academic Record Management System ARMS. The vulnerability allows attackers...
[SECURITY] Fedora 24 Update: moodle-3.1.3-1.fc24
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
[SECURITY] Fedora 23 Update: moodle-3.0.7-1.fc23
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
Learn Wi-Fi Hacking And Penetration Testing Online Course
Hacking Wi-Fi is not a trivial process, but it does not take too long to learn. If you want to learn WiFi Hacking and Penetration testing, you are at right place. Don't associate hacking as a negative, as you can learn some hacking skills yourself to secure your networks and devices. WiFi hacking...
Moodle Security Bypass Vulnerability (CNVD-2016-11545)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle, which can be exploited by attackers ...
[SECURITY] Fedora 25 Update: moodle-3.1.3-1.fc25
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
Atutor Cross-Site Request Forgery Vulnerability
ATutor is an open source Web-based learning content management system LCMS developed by the ATutor team. The system includes teaching content management, forums, chat rooms and other modules. A cross-site request forgery vulnerability exists in the /createcourse.php page in ATutor version 2.2.2,...
moodle -- multiple vulnerabilities
Marina Glancy reports: MSA-16-0023: Question engine allows access to files that should not be available MSA-16-0024: Non-admin site managers may accidentally edit admins via web services MSA-16-0025: Capability to view course notes is checked in the wrong context MSA-16-0026: When debugging is...
ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course)
ATutor 2.2.2 - Cross-Site Request Forgery Add New Course Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana...
UBUNTU-CVE-2016-9186
Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors...
Learn Python Online — From Scratch to Penetration Testing
When we started our brand new THN Deals Store last week on the special occasion of company's 6th Anniversary, we introduced its very first product, Professional Hacking Certification Package, and received great response from our readers. Thank you! If you have not yet, you can still get this deal...
Moodle CMS 3.1.2 Cross Site Scripting / File Upload
Title: Multiple Vulnerabilities - Moodle CMS -3.1.2 Application: Moodle CMS Versions Affected: = 3.1.2 Vendor URL: https://moodle.org/ Software URL: https://download.moodle.org/ Discovered by: Joel Vadodil Varghese Tested on: Windows 10 Pro Bugs: Persistent Cross Site Scripting, Non-Persistent...
Moodle 2.9.x < 2.9.7 Multiple Vulnerabilities
Binary data 9521.prm...
Moodle 3.0.x < 3.0.5 Multiple Vulnerabilities
Binary data 9522.prm...
Atutor Arbitrary File Disclosure Vulnerability
ATutor is ATutor team developed a set of open source Web-based learning content management system . An arbitrary file disclosure vulnerability exists in Atutor. When saving data information, due to the "icon" HTTP POST passed to the "/mods/core/courses/users/createcourse.php" script, which fails ...