Lucene search
Veracode Vulnerability DatabaseVERACODE:4697HistoryJul 26, 2017 - 7:51 a.m.
Authorization Bypass
2017-07-2607:51:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.002
Percentile
61.9%
Moodle is vulnerable to authorization bypasses. The attacks exist because mod/wiki/admin.php does not validate deletion parameters properly, allowing the users with deletion capability to at least one Wiki activity in the course to delete other Wiki pages in the same course.
Related
cve
cve
CVE-2014-7837
2014-11-24 11:59:07
cvelist
cvelist
CVE-2014-7837
2014-11-24 11:00:00
ubuntucve
ubuntucve
CVE-2014-7837
2014-11-24 00:00:00
github
github
Moodle allows attackers to remove wiki pages
2022-05-13 01:12:43
osv
osv
Moodle allows attackers to remove wiki pages
2022-05-13 01:12:43
nvd
nvd
CVE-2014-7837
2014-11-24 11:59:07
prion
prion
Code injection
2014-11-24 11:59:00
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0483)
2022-01-28 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-11-22 13:54:50