Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 535
CVE-2011-4296
lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect capabilities to the course-creator role, which allows remote authenticated users to modify course filters by leveraging this role.
CVE-2011-4296
lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 ...
CVE-2011-4295
The moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which allows remote authenticated users to gain privileges by making a role assignment.
CVE-2011-4295
The moodle_enrol_external:role_assign function in enrol/externallib.ph ...
CVE-2011-4294
The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via unspecified vectors.
CVE-2011-4294
The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x b ...
CVE-2011-4293
The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors.
CVE-2011-4293
The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before ...
CVE-2011-4292
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.
CVE-2011-4292
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2011-4296 lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect capabilities to the course-creator role, which allows remote authenticated users to modify course filters by leveraging this role. | CVSS2: 5.5 | 0% Низкий | около 13 лет назад |
| CVE-2011-4296 lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 ... | CVSS2: 5.5 | 0% Низкий | около 13 лет назад |
| CVE-2011-4295 The moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which allows remote authenticated users to gain privileges by making a role assignment. | CVSS2: 6.5 | 0% Низкий | около 13 лет назад |
| CVE-2011-4295 The moodle_enrol_external:role_assign function in enrol/externallib.ph ... | CVSS2: 6.5 | 0% Низкий | около 13 лет назад |
| CVE-2011-4294 The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via unspecified vectors. | CVSS2: 5.8 | 0% Низкий | около 13 лет назад |
| CVE-2011-4294 The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x b ... | CVSS2: 5.8 | 0% Низкий | около 13 лет назад |
| CVE-2011-4293 The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors. | CVSS2: 6.4 | 0% Низкий | около 13 лет назад |
| CVE-2011-4293 The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before ... | CVSS2: 6.4 | 0% Низкий | около 13 лет назад |
| CVE-2011-4292 Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations. | CVSS2: 4 | 1% Низкий | около 13 лет назад |
| CVE-2011-4292 Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a ... | CVSS2: 4 | 1% Низкий | около 13 лет назад |
Уязвимостей на страницу