CVE-2022-30597

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...

UBUNTU-CVE-2022-30597

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field...

thesis.icict.fiocruz.br Cross Site Scripting vulnerability OBB-2621306

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-30105

In Belkin N300 Firmware 1.00.08, the script located at /settinghidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the form name form; list vulnerable parameters, are not properly sanitize...

Belkin N300 Firmware 操作系统命令注入漏洞

Belkin N300 Firmware is firmware for Belkin's Belkin N300 router. A security vulnerability exists in Belkin N300 Firmware version 1.00.08, which stems from multiple remote command injection vulnerabilities in the script /settinghidden.asp accessible both before and after configuring the device. A...

agronomica.sc.gov.br Cross Site Scripting vulnerability OBB-2621106

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-6W93-4C4P-XV2X Plone Metadata Disclosure

uidcatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain metadata about hidden objects via a crafted URL...

Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. a security vulnerability exists in Moodle, which stems from the description user field failing to hide when set to hidden. No details o...

CVE-2022-1455

The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...

CVE-2022-1455

The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled...

produce.gob.pe Cross Site Scripting vulnerability OBB-2618597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

versanttest.com Cross Site Scripting vulnerability OBB-2618108

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

thesaltydog.com Cross Site Scripting vulnerability OBB-2618068

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rtfhsd.org Cross Site Scripting vulnerability OBB-2617966

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

portitrans.com Cross Site Scripting vulnerability OBB-2617935

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Moodle Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the corecoursegetcategories web service to return hidden categories, which should be omitted when fetching course categories...

GHSA-5W4H-XRR5-7273 Moodle Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the corecoursegetcategories web service to return hidden categories, which should be omitted when fetching course categories...

Moodle Information Disclosure

In Moodle 3.3, the course overview block reveals activities in hidden courses...

GHSA-W2PJ-R8M3-R4JC Moodle Information Disclosure

In Moodle 3.3, the course overview block reveals activities in hidden courses...

GHSA-59J6-8G7W-PRF7 Moodle exposes hidden grades to students

lib/classes/gradesexternal.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role to access the getgrades web service...