UBUNTU-CVE-2015-3176

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

Moodle Sealed User Login Vulnerability

Moodle is an open source web-based teaching and learning application. Versions of Moodle prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 have a security vulnerability when self-registration is enabled, which allows blocked users to bypass restrictions on logging into the application...

Moodle Target Username Information Disclosure Vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability exists in Moodle versions prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 when self-registration is turned on, which could be exploited by an attacker to obtain information about a target user's full name...

MGASA-2015-0229 Updated moodle packages fix security vulnerabilities

Updated moodle package fixes security vulnerabilities: In Moodle before 2.6.11, leaving gradebook feedback is a trusted action and such capabilities in other modules already have an XSS mask, 'mod/quiz:grade' was missing this flag CVE-2015-3174. In Moodle before 2.6.11, some error messages displa...

(Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->

!/usr/bin/perl ------------------------------------------------------------------------------------------------------------------- Post Form -- Parent Register name Credentials Changer SQLi EXPLOIT -- Online Grades & Attendance v-3.2.6--...

CVE-2002-0095

CVE-2002-0095 affects BSCW (Basic Support for Cooperative Work) in its default configuration (3.x and possibly 4) where user self-registration is enabled. This could allow remote attackers to upload files and potentially join a user community that was intended to be closed. The CVSS metrics indic...

CVE-2002-0095

The default configuration of BSCW Basic Support for Cooperative Work 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed...

CVE-2002-0095

The default configuration of BSCW Basic Support for Cooperative Work 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed...

BSCW 3.44.0 - Insecure Default Installation

BSCW 3.44.0 - Insecure Default Installation source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number ...

BSCW 3.4/4.0 - Insecure Default Installation

source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number of Unix variants. The default installation...