Vulnerabilities (CVE)

Filtered by vendor Lmsdoctor Subscribe
Filtered by product 2 Factor Authentication
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-28986 1 Lmsdoctor 1 2 Factor Authentication 2024-11-21 5.0 MEDIUM 7.5 HIGH
LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts.
CVE-2022-28601 1 Lmsdoctor 1 2 Factor Authentication 2024-11-21 4.0 MEDIUM 6.5 MEDIUM
A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism.