Code injection

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5012

CVE-2016-5012: In Moodle 3.x, the glossary search function does not enforce view-permission checks, allowing exposure of glossary entries to users who should not see them. Multiple sources (SUITE/SUSE advisory, GHSA) corroborate the same issue under the Moodle glossary search behavior. No exploit...

Wordpress enhanced-tooltipglossary plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . enhanced-tooltipglossary is one of the plug-ins to improve the performance of the view image caching . A...

CVE-2016-1000132

Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8...

Moodle < 3.1.1 Multiple Vulnerabilities

Binary data 9523.prm...

CVE-2016-0280

Cross-site scripting XSS vulnerability in IBM Information Server Framework 8.5, Information Server Framework and InfoSphere Information Server Business Glossary 8.7 before FP2, Information Server Framework and InfoSphere Information Server Business Glossary 9.1 before 9.1.2.0, Information Server...

FreeBSD : moodle -- multiple vulnerabilities (3ddcb42b-5b78-11e6-b334-002590263bf5)

Marina Glancy reports : - MSA-16-0019: Glossary search displays entries without checking user permissions to view them - MSA-16-0020: Text injection in email headers - MSA-16-0021: Unenrolled user still receives event monitor notifications even though they can no longer access course %NASLMINLEVE...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-16-0019: Glossary search displays entries without checking user permissions to view them MSA-16-0020: Text injection in email headers MSA-16-0021: Unenrolled user still receives event monitor notifications even though they can no longer access course...

tynker.com XSS vulnerability

Open Bug Bounty ID: OBB-166980 Description| Value ---|--- Affected Website:| tynker.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ventureline.com XSS vulnerability

Vulnerable URL: https://www.ventureline.com/accounting-glossary/?livesearchinput==Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 810081 Google Pagerank| 4 VIP website status...

sealifebase.ca XSS vulnerability

Vulnerable URL: http://www.sealifebase.ca/Glossary/Glossary.php?q=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C%2Fscript%3Erequired=Glossary+term+can+not+be+blank. Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:|...

fishbase.mnhn.fr XSS vulnerability

Open Bug Bounty ID: OBB-108432 Description| Value ---|--- Affected Website:| fishbase.mnhn.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

The vulnerability of the Moodle learning management system allows a hacker to bypass the authentication process.

The vulnerability of the Glossary module of the Moodle learning management system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures...

What the PCI Council’s Point-to-Point-Encryption (P2PE) Update Means for You

Last week, the PCI Security Standards Council PCI SSC published the updated P2PE v2.0 standard. The Summary of Changes from v1.1 to v2.0, the updated P2PE Glossary and the PIM template are available in the PCI SSC documents library. According to the announcement, the highlights of the new version...

CVE-2015-0213

Multiple cross-site request forgery CSRF vulnerabilities in 1 editcategories.html and 2 editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims...

UBUNTU-CVE-2015-0213

Multiple cross-site request forgery CSRF vulnerabilities in 1 editcategories.html and 2 editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in 1 editcategories.html and 2 editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims...