Lucene search
K

299 matches found

Github Security Blog
Github Security Blog
added 2022/03/12 12:0 a.m.25 views

Moodle stored Cross-site Scripting

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS5.5AI score0.00569EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2022/03/11 6:15 p.m.17 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS0.00569EPSS
Exploits0References1
OSV
OSV
added 2022/03/11 6:15 p.m.21 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS5.6AI score
Exploits0References1
Prion
Prion
added 2022/03/11 6:15 p.m.23 views

Cross site scripting

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

3.5CVSS5AI score0.00569EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2022/03/11 6:15 p.m.0 views

UBUNTU-CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.4CVSS7.1AI score0.00569EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/03/11 5:54 p.m.17 views

CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected...

5.6AI score0.00569EPSS
Exploits0References1
CVE
CVE
added 2022/03/11 5:54 p.m.93 views

CVE-2021-32475

CVE-2021-32475 affects Moodle versions 3.10.0–3.10.3, 3.9.0–3.9.6, 3.8.0–3.8.8, and 3.5–3.5.17 (and older unsupported) where IDs shown in the quiz grading report could be stored XSS vectors due to insufficient sanitization. The issue is a stored XSS in the quiz grading report ID display. The conn...

5.4CVSS5.4AI score0.00569EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2022/01/26 12:0 a.m.15 views

Student Quarterly Grading System Cross-Site Scripting Vulnerability (CNVD-2022-67487)

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...

5.4CVSS3.6AI score0.00728EPSS
Exploits1References1
OSV
OSV
added 2022/01/24 5:15 p.m.3 views

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

5.4CVSS6.1AI score
Exploits0References1
Prion
Prion
added 2022/01/24 5:15 p.m.8 views

Cross site scripting

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

3.5CVSS5.6AI score0.00728EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/01/24 4:3 p.m.37 views

CVE-2021-41658

CVE-2021-41658 affects the Sourcecodester Student Quarterly Grading System (by oretnom23). The vulnerability is a Cross Site Scripting (XSS) issue exploitable via the fullname and username parameters on the users page, allowing an attacker to execute arbitrary code. The connected records corrobor...

5.4CVSS5.6AI score0.00728EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/24 4:3 p.m.10 views

CVE-2021-41658

Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...

5.8AI score0.00728EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/01/24 12:0 a.m.3 views

Student Quarterly Grading System 跨站脚本漏洞

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...

5.4CVSS5.8AI score0.00728EPSS
Exploits1References2
Exploit DB
Exploit DB
added 2021/10/13 12:0 a.m.341 views

Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting (XSS)

Exploit Title: Student Quarterly Grading System 1.0 - 'grade' Stored Cross-Site Scripting XSS Date: 11.10.2021 Exploit Author: Hüseyin Serkan Balkanli Vendor Homepage: https://www.sourcecodester.com/php/14953/student-quarterly-grading-system-using-php-and-sqlite-free-source-code.html Software Lin...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2021/10/05 12:0 a.m.222 views

Student Quarterly Grading System 1.0 - SQLi Authentication Bypass

Exploit Title: Student Quarterly Grading System 1.0 - SQLi Authentication Bypass Date: 04.10.2021 Exploit Author: Blackhan Vendor Homepage: https://www.sourcecodester.com/php/14953/student-quarterly-grading-system-using-php-and-sqlite-free-source-code.html Software Link:...

7.4AI score
Exploits0
Positive Technologies
Positive Technologies
added 2021/05/10 12:0 a.m.5 views

PT-2021-3115 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 to 3.5.17 Moodle versions 3.8 to 3.8.8 Moodle versions 3.9 to 3.9.6 Moodle versions 3.10 to 3.10.3 Description: The issue is related to the quiz grading report in Moodle, where ID numbers required additional sanitizing to...

9.8CVSS6.4AI score0.52299EPSS
Exploits19References103
Packet Storm
Packet Storm
added 2021/01/29 12:0 a.m.308 views

Online Grading System 1.0 SQL Injection

Exploit Title: Online Grading System 1.0 - 'uname' SQL Injection Date: 2021-01-28 Exploit Author: Ruchi Tiwari Vendor Homepage: https://www.sourcecodester.com/php/13711/online-grading-system-using-phpmysqli.html Software Link:...

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2021/01/29 12:0 a.m.299 views

Online Grading System 1.0 - 'uname' SQL Injection

Exploit Title: Online Grading System 1.0 - 'uname' SQL Injection Date: 2021-01-28 Exploit Author: Ruchi Tiwari Vendor Homepage: https://www.sourcecodester.com/php/13711/online-grading-system-using-phpmysqli.html Software Link:...

7.4AI score
Exploits0
Schneier on Security
Schneier on Security
added 2020/09/04 11:2 a.m.22 views

Hacking AI-Graded Tests

The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...

1.1AI score
Exploits0
Schneier on Security
Schneier on Security
added 2020/09/04 6:2 a.m.15 views

Hacking AI-Graded Tests

The company Edgenuity sells AI systems for grading tests. Turns out that they just search for keywords without doing any actual semantic analysis...

1.1AI score
Exploits0
Rows per page
Query Builder