Moodle — система управления образовательными электронными курсами

Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors.

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information.

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."

mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.

login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 ...

Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.1 ...

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 befor ...

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1 ...

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1 ...