Moodle — система управления образовательными электронными курсами

Moodle remote code execution via quiz questions

Moodle vulnerable to PHP object injection attacks

Moodle multiple cross-site scripting (XSS) vulnerabilities

Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task.

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.

Moodle allows remote attackers to read arbitrary files

Moodle Does Not Escape Characters In Email Headers

Moodle Weak Password Recovery Mechanism for Forgotten Password

Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attempt.

Moodle Unauthenticated Access