Mageia: Security Advisory (MGASA-2014-0483)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-7848

The CVE-2014-7848 entry concerns Moodle: in versions 2.6.x before 2.6.6 and 2.7.x before 2.7.3, a flaw in lib/phpunit/bootstrap.php allows remote attackers to disclose sensitive information by making a direct request, revealing the full path in an error message. This is the explicit vulnerability...

Updated moodle package fixes security vulnerabilities

In Moodle before 2.6.5, without forcing encoding, it was possible that UTF7 characters could be used to force cross-site scripts to AJAX scripts although this is unlikely on modern browsers and on most Moodle pages MSA-14-0035. In Moodle before 2.6.5, an XSS issue through $searchcourse in...