SUSE CVE-2016-3729

The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator...

CVE-2016-3729

CVE-2016-3729 affects Moodle complaints of improper access control: the user editing form in Moodle versions 3.0–3.0.3, 2.9–2.9.5, 2.8–2.8.11, and 2.7–2.7.13 (and earlier) allows remote authenticated users to edit profile fields that are supposed to be locked by the administrator. The connected a...

FreeBSD : moodle -- multiple vulnerabilities (8656cf5f-4170-11e6-8dfe-002590263bf5)

Marina Glancy reports : - MSA-16-0013: Users are able to change profile fields that were locked by the administrator. - MSA-16-0015: Information disclosure of hidden forum names and sub-names. - MSA-16-0016: User can view badges of other users without proper permissions. - MSA-16-0017: Course...