Lucene search
Veracode Vulnerability DatabaseVERACODE:6394HistoryMay 28, 2018 - 2:44 a.m.
Unauthorised Editing To Web Pages
2018-05-2802:44:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.001
Percentile
21.6%
Moodle is vulnerable to unauthorized editing to web pages. It happens because it does not prevent the capability ‘moodle/my:manageblocks’ from authenticated user role, allowing to move HTML blocks containing scripts to other pages visible by other users.
Related
prion
prion
Hardcoded credentials
2018-05-25 12:29:00
ubuntucve
ubuntucve
CVE-2018-1136
2018-05-25 00:00:00
github
github
Moodle Cross-site Scripting
2022-05-13 01:49:13
nvd
nvd
CVE-2018-1136
2018-05-25 12:29:00
cve
cve
CVE-2018-1136
2018-05-25 12:29:00
cvelist
cvelist
CVE-2018-1136
2018-05-25 12:00:00
osv
osv
CVE-2018-1136
2018-05-25 12:29:00
Moodle Cross-site Scripting
2022-05-13 01:49:13
openvas
openvas
Moodle 3.x Multiple Vulnerabilities (May 2018) - Windows
2018-05-29 00:00:00
Moodle 3.x Multiple Vulnerabilities (May 2018) - Linux
2018-05-29 00:00:00