Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 541
GHSA-mj85-3hqq-r6r9
Moodle Reflected XSS in mod_data advanced search
GHSA-32hg-73hp-vwc8
Moodle allows attackers to modify "Exclude grade" settings
GHSA-6mxm-wpqv-675h
Moodle XSS from profile fields from external db
GHSA-m882-j7gq-v9p7
Moodle allows attackers to obtain sensitive category-detail information
GHSA-wxqg-fg7v-mmc6
Moodle Authenticated Spelling Binary Remote Code Execution
GHSA-45rw-4r25-jvg7
Moodle Logged in users could view all calendar events
GHSA-qrcj-6fjw-3h9h
Moodle XSS Vulnerability
GHSA-wm4w-8vc6-2j4h
Moodle XSS Vulnerability
GHSA-8wf8-rc66-c638
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed.
GHSA-7w7p-v23v-56qr
SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-mj85-3hqq-r6r9 Moodle Reflected XSS in mod_data advanced search | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад |
| GHSA-32hg-73hp-vwc8 Moodle allows attackers to modify "Exclude grade" settings | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| GHSA-6mxm-wpqv-675h Moodle XSS from profile fields from external db | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад |
| GHSA-m882-j7gq-v9p7 Moodle allows attackers to obtain sensitive category-detail information | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| GHSA-wxqg-fg7v-mmc6 Moodle Authenticated Spelling Binary Remote Code Execution | 64% Средний | больше 3 лет назад | |
| GHSA-45rw-4r25-jvg7 Moodle Logged in users could view all calendar events | CVSS3: 4.3 | 0% Низкий | больше 3 лет назад |
| GHSA-qrcj-6fjw-3h9h Moodle XSS Vulnerability | CVSS3: 4.8 | 1% Низкий | больше 3 лет назад |
| GHSA-wm4w-8vc6-2j4h Moodle XSS Vulnerability | CVSS3: 5.3 | 10% Средний | больше 3 лет назад |
| GHSA-8wf8-rc66-c638 Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed. | 13% Средний | больше 3 лет назад | |
| GHSA-7w7p-v23v-56qr SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)." | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу