2291 matches found
Unauthorized Calendar Modification
Moodle is vulnerable to unauthorized calendar modification. The application does not check for capabilities for editing the calendar, allowing a malicious user to delete course level calendar subscription created by teacher users...
Moodle Unauthorized Modification Vulnerability
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Moodle version 3.x. The vulnerability stems from th...
Moodle Information Disclosure Vulnerability (CNVD-2017-24413)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in the Course overview block of Moodle version 3.3. An...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
Default configuration
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
UBUNTU-CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
UBUNTU-CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
Code injection
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7532
CVE-2017-7532 affects Moodle 3.x. The issue, described as: “In Moodle 3.x, course creators are able to change system default settings for courses,” indicates improper privilege handling that lets non‑administrative users alter default course configurations. CVSS information included with the entr...
CVE-2017-7531
Affected software: Moodle 3.3. Vulnerable component: course overview block. Root cause: information disclosure via the course overview block that reveals activities in hidden courses. Impact: potential viewing of hidden-course activities. Public details: CVE-2017-7531 and associated descriptions ...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses...
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses...
Information Disclosure
Moodle is vulnerable to information disclosure. Authenticated users can obtain sensitive information through a request for all course feedback within a specific time frame. This can happen because mod/feedback/lib.php doesn't check the mod/feedback:view before displaying recent feedback...
