Moodle — система управления образовательными электронными курсами

Moodle allows attackers to obtain sensitive calendar-event information

Moodle allows attackers to cause a denial of service

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

Moodle allows attackers to upload files containing JavaScript

Moodle does not provide charset information in HTTP headers

Moodle cross-site scripting (XSS) vulnerability

Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module

Moodle allows discovery of an author's username

Moodle exposes hidden grades to students

Moodle allows attackers to obtain sensitive information