CVE-2024-5438

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.7.1 via the 'attemptdelete' function due to missing validation on a user controlled key. This makes it possible for authenticated...

SUSE CVE-2010-2231

Cross-site request forgery CSRF vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter...

CVE-2010-2231

Moodle vulnerability CVE-2010-2231 is a CSRF in the quiz module (report/overview/report.php). Affects Moodle versions before 1.8.13 and 1.9.x before 1.9.9. The flaw allows remote attackers to hijack the authentication of arbitrary users to issue requests that delete quiz attempts via the attempti...