Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 647
CVE-2007-1647
Moodle 1.5.2 and earlier stores sensitive information under the web ro ...
CVE-2007-1647
Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/.
CVE-2007-1429
Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.
CVE-2007-1429
Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 all ...
CVE-2007-1429
Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.
CVE-2006-6625
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2006-6626
Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941.
CVE-2006-6625
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in M ...
CVE-2006-6626
Cross-site scripting (XSS) vulnerability in an unspecified component o ...
CVE-2006-6625
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2007-1647 Moodle 1.5.2 and earlier stores sensitive information under the web ro ... | CVSS2: 7.8 | 6% Низкий | почти 19 лет назад |
 | CVE-2007-1647 Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/. | CVSS2: 7.8 | 6% Низкий | почти 19 лет назад |
 | CVE-2007-1429 Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php. | CVSS2: 7.5 | 1% Низкий | почти 19 лет назад |
| CVE-2007-1429 Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 all ... | CVSS2: 7.5 | 1% Низкий | почти 19 лет назад |
| CVE-2007-1429 Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php. | CVSS2: 7.5 | 1% Низкий | почти 19 лет назад |
| CVE-2006-6625 Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. | CVSS2: 6.8 | 1% Низкий | около 19 лет назад |
| CVE-2006-6626 Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941. | CVSS2: 6.8 | 1% Низкий | около 19 лет назад |
| CVE-2006-6625 Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in M ... | CVSS2: 6.8 | 1% Низкий | около 19 лет назад |
| CVE-2006-6626 Cross-site scripting (XSS) vulnerability in an unspecified component o ... | CVSS2: 6.8 | 1% Низкий | около 19 лет назад |
| CVE-2006-6625 Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. | CVSS2: 6.8 | 1% Низкий | около 19 лет назад |
Уязвимостей на страницу