Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
CVE-2006-4939
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace dat ...
CVE-2006-4940
login/forgot_password.php in Moodle before 1.6.2 allows remote attacke ...
CVE-2006-4942
Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) t ...
CVE-2006-4936
Moodle before 1.6.2 does not properly validate the module instance id ...
CVE-2006-4941
Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1 ...
CVE-2006-4937
lib/setup.php in Moodle before 1.6.2 sets the error reporting level to ...
CVE-2006-4935
The Database module in Moodle before 1.6.2 does not properly handle up ...
CVE-2006-4943
course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter.
CVE-2006-4935
The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.
CVE-2006-4940
login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2006-4939 backup/backup_scheduled.php in Moodle before 1.6.2 generates trace dat ... | CVSS2: 5 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4940 login/forgot_password.php in Moodle before 1.6.2 allows remote attacke ... | CVSS2: 5 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4942 Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) t ... | CVSS2: 4.6 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4936 Moodle before 1.6.2 does not properly validate the module instance id ... | CVSS2: 10 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4941 Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1 ... | CVSS2: 4.3 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4937 lib/setup.php in Moodle before 1.6.2 sets the error reporting level to ... | CVSS2: 4 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4935 The Database module in Moodle before 1.6.2 does not properly handle up ... | CVSS2: 10 | 1% Низкий | почти 20 лет назад |
 | CVE-2006-4943 course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter. | CVSS2: 5 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4935 The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors. | CVSS2: 10 | 1% Низкий | почти 20 лет назад |
| CVE-2006-4940 login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action. | CVSS2: 5 | 1% Низкий | почти 20 лет назад |
Уязвимостей на страницу