Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
CVE-2006-0147
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.
CVE-2005-3648
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.
CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users t ...
CVE-2005-3648
Multiple SQL injection vulnerabilities in the get_record function in d ...
CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
CVE-2005-3648
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.
CVE-2005-2247
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.
CVE-2005-2247
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown i ...
CVE-2005-2247
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2006-0147 Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo. | CVSS2: 7.5 | 13% Средний | больше 20 лет назад |
 | CVE-2005-3648 Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php. | CVSS2: 7.5 | 2% Низкий | больше 20 лет назад |
| CVE-2005-3649 jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. | CVSS2: 2.6 | 3% Низкий | больше 20 лет назад |
| CVE-2005-3649 jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users t ... | CVSS2: 2.6 | 3% Низкий | больше 20 лет назад |
| CVE-2005-3648 Multiple SQL injection vulnerabilities in the get_record function in d ... | CVSS2: 7.5 | 2% Низкий | больше 20 лет назад |
| CVE-2005-3649 jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. | CVSS2: 2.6 | 3% Низкий | больше 20 лет назад |
| CVE-2005-3648 Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php. | CVSS2: 7.5 | 2% Низкий | больше 20 лет назад |
| CVE-2005-2247 Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors. | CVSS2: 10 | 2% Низкий | около 21 года назад |
| CVE-2005-2247 Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown i ... | CVSS2: 10 | 2% Низкий | около 21 года назад |
| CVE-2005-2247 Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors. | CVSS2: 10 | 2% Низкий | около 21 года назад |
Уязвимостей на страницу