CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

CVE-2016-3733

CVE-2016-3733 affects Moodle versions: 3.0–3.0.3, 2.9–2.9.5, 2.8–2.8.11, 2.7–2.7.13, and earlier. Root cause: the Moodle “restore teacher” feature allows remote authenticated users to overwrite the course idnumber. Impact: enables modification of a course identifier by an authenticated actor. Exp...

Get 9 Popular Online Hacking Training Course Package for Just $49

Since the Internet is filled with hackers and cyber criminals keen on hacking networks for valuable information, ethical hackers are in huge demand and being hired by almost every industry to help them keep their networks protected. These ethical hackers, penetration testers, and information...

[SECURITY] Fedora 26 Update: moodle-3.2.2-1.fc26

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 25 Update: moodle-3.1.5-1.fc25

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 24 Update: moodle-3.1.5-1.fc24

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Moodle cross-site scripting vulnerability (CNVD-2017-04602)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in the Course summary filter on the 'Add a...

Design/Logic Flaw

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

UBUNTU-CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

CVE-2017-7298

CVE-2017-7298 affects Moodle 3.2.2+ via a cross-site scripting vulnerability in the Course summary filter on the Add a new course page. The issue is triggered by crafted SVG attributes, enabling potential injection. Public details in connected documents reiterate the XSS in Moodle 3.2.2+ but do n...

CVE-2017-7298

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

Bejtlich Moves On

Exactly six years ago today I announced that I was joining Mandiant to become the company's first CSO. Today is my last day at FireEye, the company that bought Mandiant at the very end of 2013. The highlights of my time at Mandiant involved two sets of responsibilities. First, as CSO, I enjoyed...

gla.ac.uk XSS vulnerability

Vulnerable URL: http://www.gla.ac.uk/coursecatalogue/course/?code=x%27%3E%3CsvG%20onLoad=prompt%28%22OPENBUGBOUNTY%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

THN Deal: Complete Linux Certification Training (Save 97%)

If you are also searching for the answers to what skills are needed for a job in cyber security, you should know that this varies widely based upon the responsibilities of a particular role, the type of company you want to work with, and especially on it’s IT architect. However, Linux is the most...

[SECURITY] Fedora 25 Update: moodle-3.1.4-1.fc25

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

The vulnerability of the Moodle learning management system allows a hacker to escalate their privileges.

The vulnerability in checking the course status of the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...