Moodle — система управления образовательными электронными курсами

Moodle allows remote authenticated users to cause a denial of service (invalid database records)

Moodle allows remote authenticated users to cause a denial of service (invalid database records)

Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members

Moodle vulnerable to XSS via bundled spikephpcoverage library

Moodle does not force password changes for autosubscribed users

Moodle vulnerable to Cross-site Scripting

Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page.

Moodle Incorrect Default Settings

Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page

Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.