CVE-2014-7834: Undefined Security Weakness

mod/forum/externallib.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not verify group permissions, which allows remote authenticated users to access a forum via the forumgetdiscussions web service...

PT-2014-8301

Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.x through 2.6.5 Moodle versions 2.7.x through 2.7.2 Description The issue allows remote authenticated users to access a forum without proper group permission verification. This is due to a problem in the...