Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
CVE-2014-3552
The Shibboleth authentication plugin in auth/shibboleth/index.php in M ...
CVE-2014-3551
Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.
CVE-2014-3551
Multiple cross-site scripting (XSS) vulnerabilities in the advanced-gr ...
CVE-2014-3550
Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task.
CVE-2014-3550
Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task ...
CVE-2014-3549
Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attempt.
CVE-2014-3549
Cross-site scripting (XSS) vulnerability in the get_description functi ...
CVE-2014-3548
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog.
CVE-2014-3548
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through ...
CVE-2014-3547
Multiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via an external badge.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2014-3552 The Shibboleth authentication plugin in auth/shibboleth/index.php in M ... | CVSS2: 6 | 1% Низкий | около 12 лет назад |
 | CVE-2014-3551 Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric. | CVSS2: 3.5 | 2% Низкий | около 12 лет назад |
| CVE-2014-3551 Multiple cross-site scripting (XSS) vulnerabilities in the advanced-gr ... | CVSS2: 3.5 | 2% Низкий | около 12 лет назад |
| CVE-2014-3550 Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message for a scheduled task. | CVSS2: 4.3 | 1% Низкий | около 12 лет назад |
| CVE-2014-3550 Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task ... | CVSS2: 4.3 | 1% Низкий | около 12 лет назад |
| CVE-2014-3549 Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly handled during the logging of an invalid login attempt. | CVSS2: 4.3 | 1% Низкий | около 12 лет назад |
| CVE-2014-3549 Cross-site scripting (XSS) vulnerability in the get_description functi ... | CVSS2: 4.3 | 1% Низкий | около 12 лет назад |
| CVE-2014-3548 Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger an AJAX exception dialog. | CVSS2: 4.3 | 2% Низкий | около 12 лет назад |
| CVE-2014-3548 Multiple cross-site scripting (XSS) vulnerabilities in Moodle through ... | CVSS2: 4.3 | 2% Низкий | около 12 лет назад |
| CVE-2014-3547 Multiple cross-site scripting (XSS) vulnerabilities in badges/renderer.php in Moodle 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via an external badge. | CVSS2: 4.3 | 1% Низкий | около 12 лет назад |
Уязвимостей на страницу