Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2014-3551
Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric.
CVE-2014-3543
mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.
CVE-2014-3550
Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task ...
CVE-2014-3553
mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.4.x before ...
CVE-2014-3542
mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5 ...
CVE-2014-3543
mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, ...
CVE-2014-3552
The Shibboleth authentication plugin in auth/shibboleth/index.php in M ...
CVE-2014-3546
Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x ...
CVE-2014-3549
Cross-site scripting (XSS) vulnerability in the get_description functi ...
CVE-2014-3548
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2014-3551 Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted (1) qualification or (2) rating field in a rubric. | CVSS2: 3.5 | 2% Низкий | больше 12 лет назад |
| CVE-2014-3543 mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format. | CVSS2: 4.3 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3550 Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task ... | CVSS2: 4.3 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3553 mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.4.x before ... | CVSS2: 4.9 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3542 mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5 ... | CVSS2: 4.3 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3543 mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, ... | CVSS2: 4.3 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3552 The Shibboleth authentication plugin in auth/shibboleth/index.php in M ... | CVSS2: 6 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3546 Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x ... | CVSS2: 5 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3549 Cross-site scripting (XSS) vulnerability in the get_description functi ... | CVSS2: 4.3 | 1% Низкий | больше 12 лет назад |
| CVE-2014-3548 Multiple cross-site scripting (XSS) vulnerabilities in Moodle through ... | CVSS2: 4.3 | 2% Низкий | больше 12 лет назад |
Уязвимостей на страницу