Количество 5
Количество 5
CVE-2015-2266
message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmessages capability before accessing arbitrary conversations, which allows remote authenticated users to obtain sensitive personal-contact and unread-message-count information via a modified URL.
CVE-2015-2266
message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmessages capability before accessing arbitrary conversations, which allows remote authenticated users to obtain sensitive personal-contact and unread-message-count information via a modified URL.
CVE-2015-2266
message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x b ...
GHSA-35pr-gqm6-r366
Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information
BDU:2015-10919
Уязвимость системы управления обучением Мoodle, позволяющая нарушителю получить доступ к персональным данным контактов и сведениям о непрочитанных сообщениях
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-2266 message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmessages capability before accessing arbitrary conversations, which allows remote authenticated users to obtain sensitive personal-contact and unread-message-count information via a modified URL. | CVSS2: 4 | 0% Низкий | около 10 лет назад |
 | CVE-2015-2266 message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmessages capability before accessing arbitrary conversations, which allows remote authenticated users to obtain sensitive personal-contact and unread-message-count information via a modified URL. | CVSS2: 4 | 0% Низкий | около 10 лет назад |
| CVE-2015-2266 message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x b ... | CVSS2: 4 | 0% Низкий | около 10 лет назад |
| GHSA-35pr-gqm6-r366 Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information | 0% Низкий | около 3 лет назад | |
 | BDU:2015-10919 Уязвимость системы управления обучением Мoodle, позволяющая нарушителю получить доступ к персональным данным контактов и сведениям о непрочитанных сообщениях | CVSS2: 4 | 0% Низкий | около 10 лет назад |
Уязвимостей на страницу