Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 475
CVE-2006-0146
The server.php test script in ADOdb for PHP before 4.70, as used in mu ...
CVE-2006-0147
Dynamic code evaluation vulnerability in tests/tmssql.php test script ...
CVE-2006-0146
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter.
CVE-2006-0147
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.
CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
CVE-2005-3648
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.
CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users t ...
CVE-2005-3648
Multiple SQL injection vulnerabilities in the get_record function in d ...
CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
CVE-2005-3648
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2006-0146 The server.php test script in ADOdb for PHP before 4.70, as used in mu ... | CVSS2: 7.5 | 8% Низкий | больше 19 лет назад |
| CVE-2006-0147 Dynamic code evaluation vulnerability in tests/tmssql.php test script ... | CVSS2: 7.5 | 21% Средний | больше 19 лет назад |
 | CVE-2006-0146 The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter. | CVSS2: 7.5 | 8% Низкий | больше 19 лет назад |
| CVE-2006-0147 Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo. | CVSS2: 7.5 | 21% Средний | больше 19 лет назад |
 | CVE-2005-3649 jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. | CVSS2: 2.6 | 8% Низкий | больше 19 лет назад |
| CVE-2005-3648 Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php. | CVSS2: 7.5 | 1% Низкий | больше 19 лет назад |
| CVE-2005-3649 jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users t ... | CVSS2: 2.6 | 8% Низкий | больше 19 лет назад |
| CVE-2005-3648 Multiple SQL injection vulnerabilities in the get_record function in d ... | CVSS2: 7.5 | 1% Низкий | больше 19 лет назад |
| CVE-2005-3649 jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. | CVSS2: 2.6 | 8% Низкий | больше 19 лет назад |
| CVE-2005-3648 Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php. | CVSS2: 7.5 | 1% Низкий | больше 19 лет назад |
Уязвимостей на страницу