Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 764
CVE-2007-1429
Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 all ...
CVE-2007-1429
Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.
CVE-2006-6625
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2006-6626
Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941.
CVE-2006-6626
Cross-site scripting (XSS) vulnerability in an unspecified component o ...
CVE-2006-6625
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in M ...
CVE-2006-6626
Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941.
CVE-2006-6625
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2006-5219
SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter.
CVE-2006-5219
SQL injection vulnerability in blog/index.php in the blog module in Mo ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2007-1429 Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 all ... | CVSS2: 7.5 | 1% Низкий | больше 19 лет назад |
 | CVE-2007-1429 Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php. | CVSS2: 7.5 | 1% Низкий | больше 19 лет назад |
 | CVE-2006-6625 Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. | CVSS2: 6.8 | 2% Низкий | почти 20 лет назад |
| CVE-2006-6626 Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941. | CVSS2: 6.8 | 1% Низкий | почти 20 лет назад |
| CVE-2006-6626 Cross-site scripting (XSS) vulnerability in an unspecified component o ... | CVSS2: 6.8 | 1% Низкий | почти 20 лет назад |
| CVE-2006-6625 Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in M ... | CVSS2: 6.8 | 2% Низкий | почти 20 лет назад |
| CVE-2006-6626 Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. NOTE: It is unclear whether this candidate overlaps CVE-2006-4784 or CVE-2006-4941. | CVSS2: 6.8 | 1% Низкий | почти 20 лет назад |
| CVE-2006-6625 Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the navtail parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. | CVSS2: 6.8 | 2% Низкий | почти 20 лет назад |
| CVE-2006-5219 SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter. | CVSS2: 5.1 | 2% Низкий | около 20 лет назад |
| CVE-2006-5219 SQL injection vulnerability in blog/index.php in the blog module in Mo ... | CVSS2: 5.1 | 2% Низкий | около 20 лет назад |
Уязвимостей на страницу