32291 matches found
campcodes Complete Web-Based School Management System 安全漏洞
Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System, which originates from an SQL injection vulnerability in the index paramet...
PT-2024-31440 · Unknown · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic vulnerability was found in the Campcodes Complete Web-Based School Management System, affecting an unknown function of the file /view/timetable inser...
PT-2024-31439 · Campcodes · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue has been found in the system, affecting the processing of the file /view/timetable update form.php. The manipulation of the grade argument lead...
PT-2024-31441 · Unknown · Campcodes Complete Web-Based School Management System
Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file /view/timetable grade wise.php. The...
[SECURITY] Fedora 39 Update: kubernetes-1.27.13-1.fc39
Open Source Production-Grade Container Scheduling And Management Platform...
Tenda W30E 安全漏洞
Tenda W30E is an enterprise-grade wireless router designed for SOHO, small and micro business offices and small store networking, supporting Wi-Fi 6 technology. The Tenda W30E suffers from a buffer overflow vulnerability that stems from the page parameter of the fromwebExcptypemanFilter method...
BIT-MOODLE-2020-1754
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups...
BIT-MOODLE-2021-20184
It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...
BIT-MOODLE-2023-28336 Moodle: teacher can access names of users they do not have permission to access
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access...
BIT-MOODLE-2023-46858
Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms of rich content are used by teachers to enhance their courses ... admins and teachers can post XSS-capable content, but students can not."...
BIT-MOODLE-2023-5541 Moodle: xss risk when using csv grade import method
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.12.10 Bug Fix Update
Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.12.10 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation...
[SECURITY] Fedora 39 Update: kubernetes-1.27.8-1.fc39
Open Source Production-Grade Container Scheduling And Management Platform...
Cross-site Scripting (XSS)
moodle/moodle is vulnerable to Cross-site Scripting XSS. A cross-site scripting XSS vulnerability in the CSV grade import method allows an attacker to inject malicious code into a Moodle site by uploading a specially crafted CSV file containing the malicious code. The malicious code would then be...
Moodle Cross-site Scripting vulnerability
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...
GHSA-28GC-4QQ5-8Q26 Moodle Cross-site Scripting vulnerability
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...
CVE-2023-5541
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...
CVE-2023-5541
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content...
