Логотип exploitDog
product: "moodle"
Консоль
Логотип exploitDog

exploitDog

product: "moodle"
Moodle

Moodle — система управления образовательными электронными курсами

Релизный цикл, информация об уязвимостях

Продукт: Moodle
Вендор: moodle

График релизов

4.55.05.120242025202620272028

Недавние уязвимости Moodle

Количество 2 647

nvd логотип

CVE-2013-4524

около 12 лет назад

Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path.

CVSS2: 6.8
EPSS: Низкий
debian логотип

CVE-2013-4524

около 12 лет назад

Directory traversal vulnerability in repository/filesystem/lib.php in ...

CVSS2: 6.8
EPSS: Низкий
nvd логотип

CVE-2013-4523

около 12 лет назад

Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.

CVSS2: 3.5
EPSS: Низкий
debian логотип

CVE-2013-4523

около 12 лет назад

Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle ...

CVSS2: 3.5
EPSS: Низкий
nvd логотип

CVE-2013-4522

около 12 лет назад

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2013-4522

около 12 лет назад

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x b ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2013-4524

около 12 лет назад

Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path.

CVSS2: 6.8
EPSS: Низкий
ubuntu логотип

CVE-2013-4525

около 12 лет назад

Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question.

CVSS2: 3.5
EPSS: Низкий
ubuntu логотип

CVE-2013-4523

около 12 лет назад

Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.

CVSS2: 3.5
EPSS: Низкий
ubuntu логотип

CVE-2013-4522

около 12 лет назад

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.

CVSS2: 5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
nvd логотип
CVE-2013-4524

Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path.

CVSS2: 6.8
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4524

Directory traversal vulnerability in repository/filesystem/lib.php in ...

CVSS2: 6.8
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4523

Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.

CVSS2: 3.5
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4523

Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle ...

CVSS2: 3.5
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-4522

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.

CVSS2: 5
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-4522

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x b ...

CVSS2: 5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4524

Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path.

CVSS2: 6.8
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4525

Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question.

CVSS2: 3.5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4523

Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.

CVSS2: 3.5
0%
Низкий
около 12 лет назад
ubuntu логотип
CVE-2013-4522

lib/filelib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote attackers to obtain sensitive information by requesting a file that had been previously retrieved by a caching proxy server.

CVSS2: 5
0%
Низкий
около 12 лет назад

Уязвимостей на страницу

Поделиться