Description

mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors.

Remediation

References

CVE-2015-5341

Related Vulnerabilities

FluxBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-10029)

MySQL CVE-2018-3276 Vulnerability (CVE-2018-3276)

WordPress Plugin Contact Form Manager Multiple Vulnerabilities (1.4.4)

WordPress Plugin Spotlight Social Feeds [Block, Shortcode, and Widget] Cross-Site Scripting (1.4.2)

Oracle Database Server Other Vulnerability (CVE-2007-0276)

Severity

Medium

Classification

CVE-2015-5341 CWE-264 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities