https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:41:36 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/CERTFR-2014-AVI-485 https://vulnerability.circl.lu/vuln/fkie_cve-2014-7833 <p>mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher.</p> <p>mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2014-7833 https://vulnerability.circl.lu/vuln/ghsa-jq7x-gm9r-v8m7 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher.</p> https://vulnerability.circl.lu/vuln/ghsa-jq7x-gm9r-v8m7 https://vulnerability.circl.lu/vuln/gsd-2014-7833 gsd-2014-7833 https://vulnerability.circl.lu/vuln/gsd-2014-7833