Moodle — система управления образовательными электронными курсами

Уязвимость виртуальной обучающей среды Moodle, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю получить провести атаку межсайтового скриптинга (XSS)

Moodle allows IDOR when accessing the cohorts report

Moodle's mod_data edit/delete pages pass CSRF token in GET parameter

Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users

Moodle has an IDOR in messaging web service which allows access to some user details

Moodle's AJAX section delete does not respect course_can_delete_section()

Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository

Moodle allows IDOR in RSS block, which allows access to additional RSS feeds

Moodle has a CSRF risk in Brickfield tool's analysis request action

Moodle has a CSRF risk in user tours manager that allows tour duplication