WordPress LifterLMS 4.21.1 Plugin - Access Other Student Grades/Answers via IDOR Vulnerability

Exploit Title: WordPress Plugin LifterLMS 4.21.1 - Access Other Student Grades/Answers via IDOR Exploit Author: captainhook Vendor Homepage: https://lifterlms.com Software Link: https://lifterlms.com Version: 4.21.1 Tested on: any Description The plugin was affected by an IDOR issue, allowing...

WordPress Plugin LifterLMS 4.21.1 - Access Other Student Grades/Answers via IDOR

Exploit Title: WordPress Plugin LifterLMS 4.21.1 - Access Other Student Grades/Answers via IDOR Date: 2021-05-17 Exploit Author: captainhook Vendor Homepage: https://lifterlms.com Software Link: https://lifterlms.com Version: 4.21.1 Tested on: any Description The plugin was affected by an IDOR...

Online Grades Detection (HTTP)

HTTP based detection of Online Grades. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.146181";...

LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR

The plugin was affected by an IDOR issue, allowing students to see other student answers and grades PoC - Add 2 users with Student role for the scenario . - Create A course With a quiz I picked True or Flase question for my quiz - Set Enrol on Free for the ease of scenario - Enrol into the...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

CVE-2021-20184

CVE-2021-20184 : Moodle suffers from insufficient capability checks in grade-related web services, allowing students to view other students’ grades. Affected versions are Moodle releases before 3.10.1, 3.9.4, and 3.8.7. The issue enables information disclosure without explicit exploits described ...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

PT-2021-2241 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.10.1 Moodle versions prior to 3.9.4 Moodle versions prior to 3.8.7 Description: The issue is related to insufficient capability checks in some grade-related web services, allowing students to view other students'...

WebUntis 2020.12.1 Cross Site Scripting

I. VULNERABILITY ------------------------- WebUntis 2020.12.1 - Authenticated Cross Site Scripting II. BACKGROUND ------------------------- WebUntis is a tool for schools and universities to deliver electronic timetables to their students. Depending from the activated modules it does also contain...

Moodle Information Disclosure Vulnerability (CNVD-2020-24680)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle. An attacker could exploit the vulnerability to view the grades of other groups of users...

Qualys Cloud Platform 2.33 New Features

This release of the Qualys Cloud Platform version 2.33 includes the release for CertView, plus updates and new features for AssetView, Cloud Agent, EC2 Connector, Security Assessment Questionnaire, Web Application Scanning, and Web Application Firewall, highlights as follows. This posting has bee...

Student Arrested For Using Keylogger and Changing Grades 90 Times

By Uzair Amir An ex-wrestler and student of the University of Iowa is This is a post from HackRead.com Read the original post: Student Arrested For Using Keylogger and Changing Grades 90 Times...

Grade Information Leakage

Moodle is vulnerable to grade information leakage. The leakage exists because lib/classes/gradesexternal.php does not enforce moodle/grade:viewhidden capability, allowing the students to view hidden grades through getgrade services...

Information Disclosure

Moodle is vulnerable to information disclosure. The coregrade component of the library shows the overview of all grades including hidden grades...

SSL Labs Grading Redesign (Preview 1)

We’re excited to share with you the first preview of our next-generation grading. This is something that’s long overdue but, due to lack of available time, we managed to keep up patching the first-generation grading to keep up with the times. Now, finally, we’re taking the next necessary steps to...

library.dallasisd.org XSS vulnerability

Vulnerable URL: http://library.dallasisd.org/TLCScripts/interpac.dll?Search=YSM=,0,%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=alert'OPENBUGBOUNTY'%20//%3E%3CSvg%3E=-81=68=-1=0=0=1=1=0=Buried=0=10=30 Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

pid.gov.pk XSS vulnerability

Vulnerable URL: http://www.pid.gov.pk/?s="=17=11 Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 196709 VIP website status:| No Check pid.gov.pk SSL...