Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
GHSA-g96h-wvrm-c2ww
Moodle Improper Access Control
GHSA-gj2j-ppjq-9pjg
Moodle Cross-site scripting (XSS) vulnerability in course management search
GHSA-r3fc-hx6q-g6cq
Moodle allows attackers to discover student e-mail addresses
GHSA-f5pm-c4cw-563p
Moodle cross-site request forgery (CSRF) vulnerability
GHSA-wxqg-fg7v-mmc6
Moodle Authenticated Spelling Binary Remote Code Execution
GHSA-45rw-4r25-jvg7
Moodle Logged in users could view all calendar events
GHSA-qrcj-6fjw-3h9h
Moodle XSS Vulnerability
GHSA-wm4w-8vc6-2j4h
Moodle XSS Vulnerability
GHSA-8wf8-rc66-c638
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed.
GHSA-7w7p-v23v-56qr
SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-g96h-wvrm-c2ww Moodle Improper Access Control | CVSS3: 6.5 | 1% Низкий | около 4 лет назад |
| GHSA-gj2j-ppjq-9pjg Moodle Cross-site scripting (XSS) vulnerability in course management search | CVSS3: 6.1 | 2% Низкий | около 4 лет назад |
| GHSA-r3fc-hx6q-g6cq Moodle allows attackers to discover student e-mail addresses | CVSS3: 4.3 | 2% Низкий | около 4 лет назад |
| GHSA-f5pm-c4cw-563p Moodle cross-site request forgery (CSRF) vulnerability | CVSS3: 8.8 | 1% Низкий | около 4 лет назад |
| GHSA-wxqg-fg7v-mmc6 Moodle Authenticated Spelling Binary Remote Code Execution | 43% Средний | около 4 лет назад | |
| GHSA-45rw-4r25-jvg7 Moodle Logged in users could view all calendar events | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| GHSA-qrcj-6fjw-3h9h Moodle XSS Vulnerability | CVSS3: 4.8 | 2% Низкий | около 4 лет назад |
| GHSA-wm4w-8vc6-2j4h Moodle XSS Vulnerability | CVSS3: 5.3 | 14% Средний | около 4 лет назад |
| GHSA-8wf8-rc66-c638 Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitrary web script or HTML via a crafted blog link within an RSS feed. | 22% Средний | больше 4 лет назад | |
| GHSA-7w7p-v23v-56qr SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)." | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу