Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2013-4940
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression.
CVE-2013-4939
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.
CVE-2013-4938
The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10 ...
CVE-2013-4941
Cross-site scripting (XSS) vulnerability in uploader.swf in the Upload ...
CVE-2013-2242
mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before ...
CVE-2013-4939
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility c ...
CVE-2013-2243
mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x befo ...
CVE-2013-4942
Cross-site scripting (XSS) vulnerability in flashuploader.swf in the U ...
CVE-2013-2244
Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionli ...
CVE-2013-2245
rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x befo ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2013-4940 Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression. | CVSS2: 4.3 | 1% Низкий | больше 13 лет назад |
| CVE-2013-4939 Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. | CVSS2: 4.3 | 1% Низкий | больше 13 лет назад |
| CVE-2013-4938 The LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10 ... | CVSS2: 4.3 | 1% Низкий | больше 13 лет назад |
| CVE-2013-4941 Cross-site scripting (XSS) vulnerability in uploader.swf in the Upload ... | CVSS2: 4.3 | 1% Низкий | больше 13 лет назад |
| CVE-2013-2242 mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before ... | CVSS2: 4 | 1% Низкий | больше 13 лет назад |
| CVE-2013-4939 Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility c ... | CVSS2: 4.3 | 1% Низкий | больше 13 лет назад |
| CVE-2013-2243 mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x befo ... | CVSS2: 4 | 1% Низкий | больше 13 лет назад |
| CVE-2013-4942 Cross-site scripting (XSS) vulnerability in flashuploader.swf in the U ... | CVSS2: 4.3 | 1% Низкий | больше 13 лет назад |
| CVE-2013-2244 Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionli ... | CVSS2: 4.3 | 1% Низкий | больше 13 лет назад |
| CVE-2013-2245 rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x befo ... | CVSS2: 4 | 1% Низкий | больше 13 лет назад |
Уязвимостей на страницу