CVE-2022-28601

CVE-2022-28601 LMS Doctor 开发的 "Simple 2FA Plugin for Moodle"（Moodle 简易双因素认证插件）中存在一个双因素认证（2FA）绕过漏洞 漏洞详情 风险 : 中 厂商：LMS Doctor - Moodle 简易双因素认证插件 披露者：Flaviu Popescu 描述： 由 "LMS Doctor" 开发的 Moodle 简易双因素认证插件（Simple 2FA Plugin）存在双因素认证绕过漏洞，攻击者可覆盖账户绑定的手机号码。 从而允许其绕过验证的第二阶段。 概念验证： 以下示例展示了使用自行注册的账户进行初始登录的过程。...

CVE-2022-28986

CVE-2022-28986 Una vulnerabilidad de referencias directas a objetos inseguras IDOR en el "Simple 2FA Plugin for Moodle" de LMS Doctor Detalles de la vulnerabilidad Riesgo : Crítico Vendedor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Divulgado por: Flaviu Popescu Descripción: U...

CVE-2022-28601

CVE-2022-28601 concerns the Simple 2FA Plugin for Moodle by LMS Doctor. A 2FA bypass exists: remote attackers can overwrite the phone number used for confirmation via profile.php, thus bypassing the phone verification mechanism. The affected component is the Moodle plugin’s 2FA handling; the root...

CVE-2022-28986

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

Spoofing

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

CVE-2022-28986

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

Moodle和Darwin Factor 安全漏洞

LMS Doctor 2 Factor Authentication for Moodle is a Moodle plugin for secondary authentication from LMS Doctor. A security vulnerability exists in LMS Doctor 2 Factor Authentication for Moodle that stems from the presence of a double authentication 2FA bypass issue. A remote attacker could use thi...