CVE-2014-0129

badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated users to modify the visibility of an arbitrary badge via unspecified vectors...

PT-2014-3490

Name of the Vulnerable Software and Affected Versions Moodle versions 2.5.x through 2.5.4 Moodle versions 2.6.x through 2.6.1 Description The issue concerns the improper tracking of badge issuance to users, allowing remote authenticated users to modify the visibility of arbitrary badges...