Description

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.

Remediation

References

CVE-2015-0213

Related Vulnerabilities

WordPress Plugin Social Metrics Tracker Cross-Site Scripting (1.6.8)

Jboss EAP CVE-2024-7885 Vulnerability (CVE-2024-7885)

Apache HTTP Server CVE-2005-2700 Vulnerability (CVE-2005-2700)

WordPress Plugin Windows Desktop and iPhone Photo Uploader Arbitrary File Upload (1.8)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.15)

Severity

Medium

Classification

CVE-2015-0213 CWE-352

Tags

Missing Update Known Vulnerabilities