PT-2025-42787

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.2 147 Description ClipBucket v5 is an open source video sharing platform susceptible to arbitrary PHP code execution. The type parameter within a POST request to the /upload/admin area/actions/update launch.php...

CVE-2018-17341

BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtreehtaccessurl=admin/images/..\ URI...

PT-2018-13990

Name of the Vulnerable Software and Affected Versions BigTree version 4.2.23 Description The issue allows remote attackers to bypass authentication when Advanced or Simple Rewrite routing is enabled. This can be achieved by using a .. substring in a URI, such as launch.php?bigtree htaccess...

CVE-2014-7832

mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by...

CVE-2014-7832: Undefined Security Weakness

mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by...

PT-2014-8299

Name of the Vulnerable Software and Affected Versions Moodle versions 2.4.11 and earlier, 2.5.x before 2.5.9, 2.6.x before 2.6.6, 2.7.x before 2.7.3 Description The issue concerns the LTI module in Moodle, where the mod/lti/launch.php file performs access control at the course level rather than a...