CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

Design/Logic Flaw

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

UBUNTU-CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The CVE-2013-2080 entry concerns Moodle’s core_grade component where hidden grades are not properly accounted for. The vulnerability affects Moodle versions: 2.2.10 and 2.3.x prior to 2.3.7, and 2.4.x prior to 2.4.4. A remote authenticated user (via the student role) can read the Gradebook Overvi...

PT-2013-3534

Name of the Vulnerable Software and Affected Versions Moodle versions 2.2.10 and earlier, 2.3.x before 2.3.7, 2.4.x before 2.4.4 Description The issue allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report, due to...

CVE-2013-2080: Undefined Security Weakness

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2006-3914

Cross-site scripting XSS vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before bein...

CVE-2006-3914: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before bein...