CVE-2026-102588

A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery CSRF token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This...

CVE-2026-102588

A vulnerability in Moodle allows a remote attacker to perform unauthorized actions via a Cross-Site Request Forgery (CSRF) flaw in the XML grade import feature. Because the feature lacks proper CSRF token validation , an attacker can trick an authenticated user with grade management permissions i...

EUVD-2012-5968

Malware in sbrugna...

SQL Injection Vulnerability in Pisces Forest PHP Based MVC Faculty Selection Grade Management System

Pisces forest PHP based MVC faculty elective course grade management system is based on a three-tier model to develop faculty elective course grade management system. SQL injection vulnerability exists in the PHP based MVC Academic Record Management System ARMS. The vulnerability allows attackers...

CVE-2012-6098

grade/edit/outcome/editform.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/grade:manage capability requirement, which allows remote authenticated users to convert custom outcomes into...

CVE-2012-6098

grade/edit/outcome/editform.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly enforce the moodle/grade:manage capability requirement, which allows remote authenticated users to convert custom outcomes into...

Online Grades & Attendance 3.2.6 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Online Grades & Attendance 3.2.6 Blind SQL Injection Exploit ============================================================ !/usr/bin/perl...