VPL-JAIL-SYSTEM Security Vulnerability

VPL-JAIL-SYSTEM is a library by the individual developer of jcrodriguez-dis. Provides an execution sandbox for the VPL Moodle plugin. A security vulnerability exists in VPL-JAIL-SYSTEM v4.0.2 and earlier versions, which stems from a path traversal issue...

CVE-2022-39183

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

Open redirect

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

CVE-2022-39183 Moodle Plugin - SAML Auth Open Redirect

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

PT-2023-13706 · Moodle · Moodle Plugin - Saml Auth

Name of the Vulnerable Software and Affected Versions: Moodle Plugin - SAML Auth affected versions not specified Description: The issue may allow Open Redirect through unspecified vectors. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2022-39183 Moodle Plugin - SAML Auth Open Redirect

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

The vulnerability of the H5P plugin in the virtual learning environment Moodle, which allows a intruder to gain unauthorized access to protected information

The vulnerability of the H5P plugin in the virtual learning environment Moodle is related to deficiencies in the system’s boundary control mechanisms. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information...

CVE-2022-28601

A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism...

CVE-2022-28986

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

CVE-2022-28986

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references IDOR vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts...

CVE-2021-26812

Cross Site Scripting XSS in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application...

Moodle Jmol Filter 6.1 - Directory Traversal / Cross-Site Scripting

Exploit Title: Moodle filterjmol multiple vulnerabilities Directory Traversal and XSS Date: 20 May 2019 Exploit Author: Dionach Ltd Exploit Author Homepage: https://www.dionach.com/blog/moodle-jmol-plugin-multiple-vulnerabilities Software Link: https://moodle.org/plugins/filterjmol Version: =6.1...

Moodle PoodLL Filter plugin cross-site scripting vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia.PoodLL is a collection of plug-ins for adding audio and video. A cross-site scripting...