Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2016-0725
Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string.
CVE-2016-0724
The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to obtain sensitive information via a web-service request.
CVE-2015-3274
Cross-site scripting (XSS) vulnerability in the user_get_user_details ...
CVE-2015-3273
mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the ...
CVE-2015-3275
Multiple cross-site scripting (XSS) vulnerabilities in the SCORM modul ...
CVE-2015-3272
Open redirect vulnerability in the clean_param function in lib/moodlel ...
CVE-2015-5339
The core_enrol_get_enrolled_users web service in enrol/externallib.php ...
CVE-2016-0724
The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get ...
CVE-2015-5272
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authentic ...
CVE-2015-5341
mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2016-0725 Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string. | CVSS3: 6.1 | 2% Низкий | больше 10 лет назад |
| CVE-2016-0724 The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to obtain sensitive information via a web-service request. | CVSS3: 4.3 | 2% Низкий | больше 10 лет назад |
| CVE-2015-3274 Cross-site scripting (XSS) vulnerability in the user_get_user_details ... | CVSS3: 6.1 | 1% Низкий | больше 10 лет назад |
| CVE-2015-3273 mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the ... | CVSS3: 4.3 | 2% Низкий | больше 10 лет назад |
| CVE-2015-3275 Multiple cross-site scripting (XSS) vulnerabilities in the SCORM modul ... | CVSS3: 6.1 | 1% Низкий | больше 10 лет назад |
| CVE-2015-3272 Open redirect vulnerability in the clean_param function in lib/moodlel ... | CVSS3: 7.4 | 2% Низкий | больше 10 лет назад |
| CVE-2015-5339 The core_enrol_get_enrolled_users web service in enrol/externallib.php ... | CVSS3: 4.3 | 1% Низкий | больше 10 лет назад |
| CVE-2016-0724 The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get ... | CVSS3: 4.3 | 2% Низкий | больше 10 лет назад |
| CVE-2015-5272 The Forum module in Moodle 2.7.x before 2.7.10 allows remote authentic ... | CVSS3: 4.3 | 2% Низкий | больше 10 лет назад |
| CVE-2015-5341 mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before ... | CVSS3: 4.3 | 1% Низкий | больше 10 лет назад |
Уязвимостей на страницу