Moodle — система управления образовательными электронными курсами
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 712
CVE-2004-1425
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.
CVE-2004-1424
Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVE-2004-2232
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.
CVE-2004-2233
Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.
CVE-2004-2235
Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.
CVE-2004-2234
Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.
CVE-2004-2237
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."
CVE-2004-2236
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.
CVE-2004-2233
Unknown "front page vulnerability with Moodle servers" for Moodle befo ...
CVE-2004-2235
Unknown vulnerability in Moodle before 1.2 has unknown impact and atta ...
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2004-1425 Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter. | CVSS2: 5 | 2% Низкий | больше 21 года назад |
| CVE-2004-1424 Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. | CVSS2: 4.3 | 1% Низкий | больше 21 года назад |
| CVE-2004-2232 SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements. | CVSS2: 7.5 | 1% Низкий | больше 21 года назад |
| CVE-2004-2233 Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors. | CVSS2: 10 | 2% Низкий | больше 21 года назад |
| CVE-2004-2235 Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text. | CVSS2: 10 | 1% Низкий | больше 21 года назад |
| CVE-2004-2234 Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators. | CVSS2: 7.5 | 1% Низкий | больше 21 года назад |
| CVE-2004-2237 Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts." | CVSS2: 10 | 2% Низкий | больше 21 года назад |
| CVE-2004-2236 Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting. | CVSS2: 10 | 1% Низкий | больше 21 года назад |
| CVE-2004-2233 Unknown "front page vulnerability with Moodle servers" for Moodle befo ... | CVSS2: 10 | 2% Низкий | больше 21 года назад |
| CVE-2004-2235 Unknown vulnerability in Moodle before 1.2 has unknown impact and atta ... | CVSS2: 10 | 1% Низкий | больше 21 года назад |
Уязвимостей на страницу