CVE-2023-37177

SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php endpoint...

CVE-2023-38844

SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesaurus parameter in exportskos.php...

PT-2024-12766

Name of the Vulnerable Software and Affected Versions PMB versions 7.4.7 and earlier Description The issue allows a remote attacker to execute arbitrary code via the thesaurus parameter in "export skos.php". Recommendations For PMB versions 7.4.7 and earlier, as a temporary workaround, consider...

PMB SQL Injection Vulnerability

PMB is a 100% free document management reference tool from the PMB Services team. A SQL injection vulnerability exists in PMB version v.7.4.7, which originates from a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code via thesaurus parameter in...

PT-2024-12593

Name of the Vulnerable Software and Affected Versions PMB Services PMB versions 7.4.7 and earlier Description The issue allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the "/admin/convert/export z3950.php" endpoint. This enables the attacker to perfor...

CVE-2023-51828

A SQL Injection vulnerability exists in PMB versions 7.4.7 and earlier . The flaw is located in the /admin/convert/export.class.php file within the get_next_notice function. This vulnerability allows remote unauthenticated attackers to execute arbitrary SQL commands by exploiting a vulnerable que...

PMB SQL Injection Vulnerability

PMB is a 100% free document management reference tool from the PMB Services team. A SQL injection vulnerability exists in PMB version v.7.4.7 that originates from allowing an unauthenticated, remote attacker to execute arbitrary code via the query parameter in the /admin/convert/exportz3950.php...

PT-2024-17959 · WordPress · The Login Lockdown – Protect Login Form

Name of the Vulnerable Software and Affected Versions: The Login Lockdown – Protect Login Form plugin for WordPress versions up to, and including, 2.08 Description: The issue is related to a missing capability check on the generate export file function. This allows authenticated attackers with...

Improper Access Control in moodle

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

GHSA-JFRG-9HPQ-9HVP Improper Access Control in moodle

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

UBUNTU-CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

Default configuration

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981

CVE-2024-25981 affects Moodle: Separate Groups mode restrictions were not honored during a forum export, causing data from all groups to be exported. By default this granted additional access to non-editing teachers. The connected documents confirm this is a Moodle forum export behavior issue; no...

CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

CVE-2024-25981 Msa-24-0004: forum export did not respect activity group settings

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers...

PT-2024-21256

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description The issue concerns Separate Groups mode restrictions not being honored during a forum export. This results in the export of forum data for all groups, providing non-editing teachers with...