Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
GHSA-c5vq-jr45-v9q2
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions.
GHSA-cfc8-jvc8-5w3f
SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data.
GHSA-cj27-r58c-6p6v
Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
GHSA-x32v-7qw8-cpq8
Moodle Unauthenticated Access
GHSA-x3x8-fjw6-hccx
Moodle does not consider "don't send" attributes during hub registration
GHSA-xr24-jp5c-6c4v
Moodle reveals absolute path in exception message
GHSA-wmvq-q9h8-7j4g
Moodle sensitive information disclosure
GHSA-xjx9-7c29-pwmm
Moodle Improper Privilege Management
GHSA-xmwv-mqh8-4xgw
Moodle allows remote attackers to read arbitrary files
GHSA-wmmc-qjq2-vvm2
Moodle is vulnerable to Sensitive Information Disclosure
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-c5vq-jr45-v9q2 Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions. | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
| GHSA-cfc8-jvc8-5w3f SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data. | 2% Низкий | больше 4 лет назад | |
| GHSA-cj27-r58c-6p6v Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter. | 1% Низкий | больше 4 лет назад | |
| GHSA-x32v-7qw8-cpq8 Moodle Unauthenticated Access | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| GHSA-x3x8-fjw6-hccx Moodle does not consider "don't send" attributes during hub registration | 2% Низкий | больше 4 лет назад | |
| GHSA-xr24-jp5c-6c4v Moodle reveals absolute path in exception message | 2% Низкий | больше 4 лет назад | |
| GHSA-wmvq-q9h8-7j4g Moodle sensitive information disclosure | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
| GHSA-xjx9-7c29-pwmm Moodle Improper Privilege Management | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| GHSA-xmwv-mqh8-4xgw Moodle allows remote attackers to read arbitrary files | 1% Низкий | больше 4 лет назад | |
| GHSA-wmmc-qjq2-vvm2 Moodle is vulnerable to Sensitive Information Disclosure | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу