Moodle — система управления образовательными электронными курсами

Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class

Moodle's login_as feature leaks information from external repositories

Moodle does not consider "don't send" attributes during hub registration

lib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 does not check for a group-membership requirement when determining whether an activity is unavailable or hidden, which allows remote authenticated users to bypass intended access restrictions by selecting an activity that is configured for a group of other users.

Moodle does not enforce capability requirements for reading blog comments

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

Moodle Authentication Bypass in File Upload

Moodle is vulnerable to Sensitive Information Disclosure

Moodle allows remote authenticated users to reassign notes

Moodle does not properly manage privileges for WebDAV repositories