233 matches found
Moodle 2.6.x < 2.6.11 / 2.7.x < 2.7.8 Multiple Vulnerabilities
Binary data 9426.prm...
FreeBSD : plone -- multiple vulnerabilities (6b3374d4-6b0b-11e5-9909-002590263bf5)
Plone.org reports : Versions Affected: All current Plone versions. Versions Not Affected: None. Nature of vulnerability: Allows creation of members by anonymous users on sites that have self-registration enabled, allowing bypass of CAPTCHA and similar protections against scripted attacks. The pat...
plone -- multiple vulnerabilities
Plone.org reports: Versions Affected: All current Plone versions. Versions Not Affected: None. Nature of vulnerability: Allows creation of members by anonymous users on sites that have self-registration enabled, allowing bypass of CAPTCHA and similar protections against scripted attacks. The patc...
UBUNTU-CVE-2015-3176
The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...
Moodle Sealed User Login Vulnerability
Moodle is an open source web-based teaching and learning application. Versions of Moodle prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 have a security vulnerability when self-registration is enabled, which allows blocked users to bypass restrictions on logging into the application...
Moodle Target Username Information Disclosure Vulnerability
Moodle is an open source web-based teaching and learning application. A security vulnerability exists in Moodle versions prior to 2.6.11, 2.7.8, 2.8.6, and 2.9 when self-registration is turned on, which could be exploited by an attacker to obtain information about a target user's full name...
MGASA-2015-0229 Updated moodle packages fix security vulnerabilities
Updated moodle package fixes security vulnerabilities: In Moodle before 2.6.11, leaving gradebook feedback is a trusted action and such capabilities in other modules already have an XSS mask, 'mod/quiz:grade' was missing this flag CVE-2015-3174. In Moodle before 2.6.11, some error messages displa...
(Post Form --> Parent Register (name)) Credentials Changer (SQLi) EXPLOIT -- Online Grades & Attendance v-3.2.6-->
!/usr/bin/perl ------------------------------------------------------------------------------------------------------------------- Post Form -- Parent Register name Credentials Changer SQLi EXPLOIT -- Online Grades & Attendance v-3.2.6--...
CVE-2002-0095
CVE-2002-0095 affects BSCW (Basic Support for Cooperative Work) in its default configuration (3.x and possibly 4) where user self-registration is enabled. This could allow remote attackers to upload files and potentially join a user community that was intended to be closed. The CVSS metrics indic...
CVE-2002-0095
The default configuration of BSCW Basic Support for Cooperative Work 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed...
CVE-2002-0095
The default configuration of BSCW Basic Support for Cooperative Work 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed...
BSCW 3.44.0 - Insecure Default Installation
BSCW 3.44.0 - Insecure Default Installation source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number ...
BSCW 3.4/4.0 - Insecure Default Installation
source: https://www.securityfocus.com/bid/3777/info BSCW Basic Support for Cooperative Work is a web-based groupware application, allowing users to share a workspace via a web interface. It runs on Microsoft Windows NT/2000 systems, as well as a number of Unix variants. The default installation...