CVE-2015-3275

The CVE-2015-3275 entry concerns Moodle’s SCORM module. Affected are Moodle versions up to 2.9.x before 2.9.1 (specifically 2.6.11, 2.7.x before 2.7.9, 2.8.x before 2.8.7, 2.9.x before 2.9.1). The vulnerability is a cross-site scripting (XSS) flaw achieved by supplying a crafted organization name...

Fedora 21 : moodle-2.7.9-1.fc21 (2015-14996)

moodle-2.7.9-1.fc21 - 2.7.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 22 : moodle-2.8.7-1.fc22 (2015-14988)

moodle-2.8.7-1.fc22 - Latest upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-15-0026: Possible phishing when redirecting to external site using referer header. CVE-2015-3272 MSA-15-0027: Capability 'mod/forum:canposttomygroups' is not respected when using 'Post a copy to all groups' in forum CVE-2015-3273 MSA-15-0028: Possible XSS through custom...