EUVD-2022-1796

Malicious code in bioql PyPI...

BIT-MOODLE-2024-34000 moodle: stored XSS in lesson overview report via user ID number

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

CVE-2024-34000

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

UBUNTU-CVE-2024-34000

ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...

PT-2024-25628 · Alt Linux +1 · Alt Linux +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue concerns a stored XSS risk due to insufficient sanitizing of ID numbers displayed in the lesson overview report. Recommendations: At the moment, there is no information about a...

CVE-2012-1159

Moodle before 2.2.2: Overview report allows users to see hidden courses...

CVE-2012-1159

Moodle before 2.2.2: Overview report allows users to see hidden courses Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ affected...

Design/Logic Flaw

Moodle before 2.2.2: Overview report allows users to see hidden courses...

CVE-2012-1159

Moodle before 2.2.2: Overview report allows users to see hidden courses...

CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

Design/Logic Flaw

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The CVE-2013-2080 entry concerns Moodle’s core_grade component where hidden grades are not properly accounted for. The vulnerability affects Moodle versions: 2.2.10 and 2.3.x prior to 2.3.7, and 2.4.x prior to 2.4.4. A remote authenticated user (via the student role) can read the Gradebook Overvi...