FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

moodle -- multiple vulnerabilities

Affected packages
moodle27 < 2.7.10
moodle28 < 2.8.8
moodle29 < 2.9.2

Details

VuXML ID c2fcbec2-5daa-11e5-9909-002590263bf5
Discovery 2015-09-14
Entry 2015-09-18
Modified 2015-09-24

Moodle Release Notes report:

MSA-15-0030: Students can re-attempt answering questions in the lesson (CVE-2015-5264)

MSA-15-0031: Teacher in forum can still post to "all participants" and groups they are not members of (CVE-2015-5272 - 2.7.10 only)

MSA-15-0032: Users can delete files uploaded by other users in wiki (CVE-2015-5265)

MSA-15-0033: Meta course synchronization enrolls suspended students as managers for a short period of time (CVE-2015-5266)

MSA-15-0034: Vulnerability in password recovery mechanism (CVE-2015-5267)

MSA-15-0035: Rating component does not check separate groups (CVE-2015-5268)

MSA-15-0036: XSS in grouping description (CVE-2015-5269)

References

CVE Name CVE-2015-5264
CVE Name CVE-2015-5265
CVE Name CVE-2015-5266
CVE Name CVE-2015-5267
CVE Name CVE-2015-5268
CVE Name CVE-2015-5269
CVE Name CVE-2015-5272
URL http://www.openwall.com/lists/oss-security/2015/09/21/1
URL https://docs.moodle.org/dev/Moodle_2.7.10_release_notes
URL https://docs.moodle.org/dev/Moodle_2.8.8_release_notes
URL https://docs.moodle.org/dev/Moodle_2.9.2_release_notes