Lucene search
+L

10 matches found

Kitploit
Kitploit
•added 2026/09/30 6:38 a.m.•15 views

MoodleExploit

Exploit de Moodle Título del Exploit: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Fecha: 15 Marzo 2019 Autor del Exploit: Darryn Ten Página del proveedor: https://moodle.org Enlace del software: https://github.com/moodle/moodle/archive/v3.4.1.zip Versión: 3.4.1...

8.8CVSS8.1AI score0.31879EPSS
SaveExploits5References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/18 12:00 a.m.•2 views

CVE-2023-3305: Improper Access Control

A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=configsave&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword...

7.5CVSS6.7AI score0.00758EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/06/18 12:00 a.m.•12 views

C-DATA Web Management System 访问控制错误漏洞

C-DATA Web Management System is a web management system from China-based C-DATA Corporation. An access control error vulnerability exists in C-DATA Web Management System version 20230607 and earlier, which stems from a problem with the file /cgi-bin/jumpto.php?class=user&page=configsave&isphp=1,...

7.5CVSS7.3AI score0.00758EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/01 12:00 a.m.•3 views

CVE-2022-4257: Improper Neutralization

A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be...

9.8CVSS5.4AI score0.4393EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/12/01 12:00 a.m.•450 views

CVE-2022-4257

A vulnerability was found in C-DATA Web Management System. It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET Parameter Handler. The manipulation of the argument hostname leads to argument injection. The attack may be...

9.8CVSS1.9AI score0.4393EPSS
SaveIn wildExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/23 12:00 a.m.•3 views

CVE-2006-4943: Undefined Security Weakness

course/jumpto.php in Moodle before 1.6.2 does not validate the session key sesskey before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter...

5CVSS6AI score0.01231EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2005/11/17 11:02 a.m.•38 views

CVE-2005-3649

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter...

2.6CVSS6AI score0.0306EPSS
SaveExploits2References1
NVD
NVD
•added 2005/11/17 11:02 a.m.•27 views

CVE-2005-3649

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter...

2.6CVSS6.6AI score0.0306EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2005/11/17 11:00 a.m.•45 views

CVE-2005-3649

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter...

6.6AI score0.0306EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/11/17 12:00 a.m.•4 views

CVE-2005-3649: Undefined Security Weakness

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter...

2.6CVSS5.8AI score0.0306EPSS
SaveExploits2References1
Rows per page
Query Builder