CVE-2014-3546

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in 1 notes/index.php and 2 user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a...

CVE-2014-3546: Undefined Security Weakness

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in 1 notes/index.php and 2 user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a...

CVE-2006-2488: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Spymac WebOS WOS 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 delfolder, 2 nick, or 3 action parameters to a notes/index.php, 4 curr parameter to b ipod/getipod.php, and in c login.php...