Moodle < 2.4 / 2.4.x < 2.4.11 / 2.5.x < 2.5.7 / 2.6.x < 2.6.4 / 2.7.x < 2.7.1 Multiple Vulnerabilities

Binary data 8723.prm...

Moodle < 2.5 / 2.5.x < 2.5.9 / 2.6.x < 2.6.6 / 2.7.x < 2.7.3 Multiple Vulnerabilities

Binary data 8721.prm...

[SECURITY] Fedora 21 Update: moodle-2.7.7-1.fc21

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 20 Update: moodle-2.6.10-1.fc20

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Updated moodle package fixes security vulnerabilities

Updated moodle package fixes security vulnerabilities: In Moodle before 2.6.7, absence of a capability check in AJAX backend script in the LTI module could allow any enrolled user to search the list of registered tools CVE-2015-0211. In Moodle before 2.6.7, the course summary on course request...

SA-CONTRIB-2015-002 - Course - Cross Site Scripting (XSS)

Course module enables you to create e-learning courses with any number of requirements for completion. The module doesn't sufficiently filter node title displays when being used in a course. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to creat...

[SECURITY] Fedora 21 Update: moodle-2.7.3-1.fc21

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 20 Update: moodle-2.5.9-1.fc20

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

CVE-2014-7832

mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by...

CVE-2014-7832

mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by...

[SECURITY] Fedora 21 Update: moodle-2.7.2-1.fc21

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 20 Update: moodle-2.5.7-1.fc20

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 19 Update: moodle-2.4.11-1.fc19

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

course registration management system 2.1 - Multiple Vulnerabilities

No description provided by source. Source: http://packetstormsecurity.org/files/view/98650/CourseMS2.1-LFI.txt ------------------------------------------------------------------------ Software................Course MS 2.1 Vulnerability...........Local File Inclusion...

Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit

No description provided by source. !/usr/bin/perl Monster Top List = 1.4.2 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://www.monstertoplist.com Exploit: http://site.com/path/sources/functions.php?rootpath=EvilScript coded and f0und3d by fluffybunny Romania...

eFront 3.6.14 (build 18012) - Stored XSS in Multiple Parameters

No description provided by source. Exploit-DB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage: http://www.efrontlearning.net/ vulnerable app...

Dokeos <= 1.8.0 (my_progress.php course) Remote SQL Injection Exploit

No description provided by source...

Blackboard Learning System 6.0 Dropbox File Download Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10515/info It is reported that Blackboard improperly allows users to download files posted in the 'Digital Dropbox'. Files in the dropbox are intended for the course administrators. The application does not verify that th...

[SECURITY] Fedora 20 Update: moodle-2.5.6-1.fc20

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

多个学校教职工密码是弱口令

简要描述： 最近闲来无事，又要考试了，逛了下学校官网，搜了下我们英语老师的课表，居然出了老师的工号，于是尝试登录，果然进了。 详细说明： 学校官网：www.scatc.net GOOGLE:inurl:/jwweb/ 发现用这个系统的有很多学校 打开教师课表，搜索老师的课表，就可以知道老师的工号，用初始密码即可登录成功， 漏洞证明： https://images.seebug.org/upload/201405/19133942899f8d9355f3c2f50ef99ef0b4...