Moodle – Cross-Site Scripting Vulnerability

Versions affected: 3.0 to 3.0.1, 2.9 to 2.9.3 and 2.8 to 2.8.9
Versions fixed: 3.0.2, 2.9.4 and 2.8.10


CVE-2016-0725

Research:
Oliveira Lima


Vendor References:

https://moodle.org/mod/forum/discuss.php?d=326206

XSS session hijacking Centreon

CVEID: CVE-2015-7672

Researches:
Bernardo Besusan (rootlabs)
Oliveira Lima

BYPASS on TREND MICRO OfficeScan.

BYPASS on TREND MICRO OfficeScan with backdoor to reverse connection.

Research:
Oliveira Lima