Description

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.

Remediation

References

CVE-2015-3179

Related Vulnerabilities

e107 Other Vulnerability (CVE-2004-2031)

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (2.1.7)

WordPress Plugin EELV Newsletter Cross-Site Scripting (3.3.0)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-9025)

WordPress 5.8.x Directory Traversal (5.8 - 5.8.9)

Severity

Low

Classification

CVE-2015-3179 CWE-264

Tags

Missing Update Known Vulnerabilities