CVE-2015-5266: Undefined Security Weakness

The enrolmetasync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-runni...

PT-2016-1294

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.6.11 Moodle versions 2.7.x before 2.7.10 Moodle versions 2.8.x before 2.8.8 Moodle versions 2.9.x before 2.9.2 Description The issue is related to the enrol meta sync function in enrol/meta/locallib.php, which allows...