Lmsdoctor

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Lmsdoctor records in CISA KEV

No Lmsdoctor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

2 Factor Authentication 2 records LOW

Records

2 records

TI-2022-11568 CVE-2022-28986 · GHSA-g8xq-6p86-29mq

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an…

LOW 37

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, pas…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02336 Published 2022-05-10 No fix listed CWE-639

TI-2022-11252 CVE-2022-28601 · GHSA-pghm-m86j-5288

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle"…

LOW 32

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01756 Published 2022-05-10 No fix listed CWE-863

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0