Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 647
CVE-2015-5335
Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL.
CVE-2015-5335
Cross-site request forgery (CSRF) vulnerability in admin/registration/ ...
CVE-2015-5332
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service (disk consumption) by leveraging the guest role and entering drafts with the editor-autosave feature.
CVE-2015-5332
Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote ...
CVE-2015-5331
Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API.
CVE-2015-5331
Moodle 2.9.x before 2.9.3 does not properly check the contact list bef ...
CVE-2015-5272
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."
CVE-2015-5272
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authentic ...
CVE-2015-5269
Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description.
CVE-2015-5269
Cross-site scripting (XSS) vulnerability in group/overview.php in Mood ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2015-5335 Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub URL. | CVSS3: 4.3 | 0% Низкий | почти 10 лет назад |
| CVE-2015-5335 Cross-site request forgery (CSRF) vulnerability in admin/registration/ ... | CVSS3: 4.3 | 0% Низкий | почти 10 лет назад |
| CVE-2015-5332 Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service (disk consumption) by leveraging the guest role and entering drafts with the editor-autosave feature. | CVSS3: 6.8 | 1% Низкий | почти 10 лет назад |
| CVE-2015-5332 Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote ... | CVSS3: 6.8 | 1% Низкий | почти 10 лет назад |
| CVE-2015-5331 Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct spam attacks via the messaging API. | CVSS3: 4.3 | 0% Низкий | почти 10 лет назад |
| CVE-2015-5331 Moodle 2.9.x before 2.9.3 does not properly check the contact list bef ... | CVSS3: 4.3 | 0% Низкий | почти 10 лет назад |
| CVE-2015-5272 The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants." | CVSS3: 4.3 | 0% Низкий | почти 10 лет назад |
| CVE-2015-5272 The Forum module in Moodle 2.7.x before 2.7.10 allows remote authentic ... | CVSS3: 4.3 | 0% Низкий | почти 10 лет назад |
| CVE-2015-5269 Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description. | CVSS3: 5.4 | 0% Низкий | почти 10 лет назад |
| CVE-2015-5269 Cross-site scripting (XSS) vulnerability in group/overview.php in Mood ... | CVSS3: 5.4 | 0% Низкий | почти 10 лет назад |
Уязвимостей на страницу