CVE-2009-4299

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors...

CVE-2009-4299

Summary: Moodle Glossary module suffers insufficient access control. Affected software/components: Moodle Glossary module (mod/glossary/showentry.php) in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7. Root cause / impact: Access control checks are not properly enforced, allowing attackers to read...

CVE-2009-4299

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors...

Fedora 12 : moodle-1.9.7-1.fc12 (2009-13065)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...

Fedora 10 : moodle-1.9.7-1.fc10 (2009-13040)

Moodle upstream has released latest stable versions 1.9.7 and 1.8.11, fixing multiple security issues. The list for 1.9.7 release: -------------------------- Security issues MSA-09-0022 - Multiple CSRF problems fixed MSA-09-0023 - Fixed user account disclosure in LAMS module MSA-09-0024 - Fixed...

Moodle SQL injection flaws

The remote host is running a version of the Moodle suite, an open-source course management system written in PHP, which is older than version 1.4.3. The remote version of this software is vulnerable to SQL injection issue in 'glossary' module due to a lack of user input sanitization. OpenVAS...

Moodle SQL injection flaws

The remote version of Moodle is vulnerable to a SQL injection issue in SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2004-2232

The CVE covers Moodle

CVE-2004-2232

SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements...

Jaws Glossary 0.40.5 - Cross-Site Scripting

Jaws Glossary 0.40.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13796/info JAWS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'Glossary' module. This may facilitate the thef...

Moodle < 1.4.3 Glossary Module SQLi

Binary data 2388.prm...

PostNuke 0.72x Phoenix Glossary Module - SQL Injection

PostNuke 0.72x Phoenix Glossary Module - SQL Injection source: https://www.securityfocus.com/bid/7697/info A vulnerability has been discovered in PostNuke Phoenix v0.723 and earlier. Specifically, the Glossary module fails to sufficiently sanitize user-supplied input, making it prone to SQL...

XOOPS Glossary Module glossaire-aff.php lettre Parameter XSS

There is a cross-site scripting issue in the version of XOOPS installed on the remote host that may allow an attacker to steal your user cookies. The flaw lies in 'glossaire-aff.php'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref : Date: 1 Apr 2003 13:08:28 -0000 From: magistrat To:...