2291 matches found
[SECURITY] Fedora 24 Update: moodle-3.0.4-1.fc24
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
Udemy: Csrf on creating course
The investigator thought that since there was a CSRF token sent for a request that does not enforce CSRF he was bypassing it...
Moodle 2.8.x < 2.8.11 / 2.9.x < 2.9.5 / 3.0.x < 3.0.3 Multiple Vulnerabilities
Binary data 9193.prm...
Moodle 2.8.x < 2.8.10 / 2.9.x < 2.9.4 / 3.0.x < 3.0.2 XSS
Binary data 9192.prm...
[SECURITY] Fedora 22 Update: moodle-2.8.11-1.fc22
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
[SECURITY] Fedora 23 Update: moodle-2.9.5-1.fc23
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
[SECURITY] Fedora 24 Update: moodle-3.0.3-1.fc24
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
MGASA-2016-0122 Updated moodle packages fix security vulnerability
In Moodle before 2.8.11, teachers who otherwise were not supposed to see students' emails could see them in the participants list CVE-2016-2151. In Moodle before 2.8.11, Moodle traditionally trusted content from external DB, however it was decided that external datasources may not be aware of web...
The vulnerability of the Moodle learning management system allows a hacker to gain access to confidential information about course participants.
The vulnerability in the coreenrolgetenrolledusers web service of the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential information about course participan...
CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
[SECURITY] Fedora 22 Update: moodle-2.8.10-1.fc22
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
[SECURITY] Fedora 23 Update: moodle-2.9.4-1.fc23
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
MGASA-2016-0029 Updated moodle packages fix security vulnerability
In Moodle before 2.8.10, web services coreenrolgetcourseenrolmentmethods and enrolselfgetinstanceinfo did not check user permission to access hidden courses CVE-2016-0724. In Moodle before 2.8.10, search string in course management interface was not escaped when being output creating potential fo...
eduwind在线教育平台course/index/index模块categoryId参数SQL注入漏洞
No description provided by source...
moodle -- multiple vulnerabilities
Marina Glancy reports: MSA-16-0001: Two enrolment-related web services don't check course visibility MSA-16-0002: XSS Vulnerability in course management search...
How to become an Information Security Expert with the CISSP Certification
If you dream of making it big in the IT security community, the CISSP certification is a necessary milestone. Having this certification to your credit portrays a sense of commitment to the security profession and shows potential employers that you have a strong knowledge base to excel in this...
[SECURITY] Fedora 22 Update: moodle-2.8.9-1.fc22
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
[SECURITY] Fedora 23 Update: moodle-2.9.3-1.fc23
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...
MGASA-2015-0464 Updated moodle packages fix security vulnerability
In Moodle before 2.8.9, if guest access is open on the site, unauthenticated users can store Atto draft data through the editor autosave area, which could be exploited in a denial of service attack CVE-2015-5332. In Moodle before 2.8.9, due to a CSRF issue in the site registration form, it is...