Moodle — система управления образовательными электронными курсами

Релизный цикл, информация об уязвимостях

Продукт: Moodle

Вендор: moodle

График релизов

Недавние уязвимости Moodle

Количество 2 647

CVE-2008-0123

около 18 лет назад

Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.

CVSS2: 4.3

EPSS: Низкий

CVE-2008-0123

около 18 лет назад

Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8 ...

CVSS2: 4.3

EPSS: Низкий

CVE-2008-0123

около 18 лет назад

CVSS2: 4.3

EPSS: Низкий

CVE-2007-6538

около 18 лет назад

SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS2: 7.5

EPSS: Низкий

CVE-2007-6538

около 18 лет назад

SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php ...

CVSS2: 7.5

EPSS: Низкий

CVE-2007-6538

около 18 лет назад

SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS2: 7.5

EPSS: Низкий

CVE-2007-3555

больше 18 лет назад

Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424.

CVSS2: 4.3

EPSS: Низкий

CVE-2007-3555

больше 18 лет назад

Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 ...

CVSS2: 4.3

EPSS: Низкий

CVE-2007-3555

больше 18 лет назад

CVSS2: 4.3

EPSS: Низкий

CVE-2007-1647

почти 19 лет назад

Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/.

CVSS2: 7.8

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано 1
CVE-2008-0123 Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.	CVSS2: 4.3	1% Низкий	около 18 лет назад
CVE-2008-0123 Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8 ...	CVSS2: 4.3	1% Низкий	около 18 лет назад
CVE-2008-0123 Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.	CVSS2: 4.3	1% Низкий	около 18 лет назад
CVE-2007-6538 SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter.	CVSS2: 7.5	1% Низкий	около 18 лет назад
CVE-2007-6538 SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php ...	CVSS2: 7.5	1% Низкий	около 18 лет назад
CVE-2007-6538 SQL injection vulnerability in ing/blocks/mrbs/code/web/view_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter.	CVSS2: 7.5	1% Низкий	около 18 лет назад
CVE-2007-3555 Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424.	CVSS2: 4.3	5% Низкий	больше 18 лет назад
CVE-2007-3555 Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 ...	CVSS2: 4.3	5% Низкий	больше 18 лет назад
CVE-2007-3555 Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter, a different vulnerability than CVE-2004-1424.	CVSS2: 4.3	5% Низкий	больше 18 лет назад
CVE-2007-1647 Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/.	CVSS2: 7.8	6% Низкий	почти 19 лет назад

Уязвимостей на страницу