Most recent entries from all

CERTFR-2016-AVI-174 — De multiples vulnérabilités ont été corrigées dans Moodle. Elles permettent à un attaquant…

2026-10-10T14:06:20.862219+00:00

CERTFR-2016-AVI-174

cnvd-2016-03327

2026-10-10T14:06:20.862276+00:00

cnvd-2016-03327

fkie_cve-2016-3733

2026-10-10T14:06:20.862295+00:00

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

GHSA-gr8j-qm8r-rfgg — Moodle Improper Access Control

2026-10-10T14:06:20.862330+00:00

Affected: Packagist: moodle/moodle

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

gsd-2016-3733

2026-10-10T14:06:20.862363+00:00

gsd-2016-3733

Withdrawn: UBUNTU-CVE-2016-3733

2026-10-10T14:06:20.862377+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

VAR-201704-0119

2026-10-10T14:06:20.862399+00:00

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber. Moodle is a free, open source e-learning software platform developed by Dr. Martin Dougiamas of Australia, also known as a course management system, a learning management system or a virtual learning environment. There is a design vulnerability in Moodle. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. Moodle versions 3.0 to 3.0.3, 2.9 to 2.9.5, 2.8 to 2.8.11, 2.7 to 2.7.13 and earlier unsupported versions are affected