Поиск уязвимостей
Количество 2 764
Количество 2 764
GHSA-rg56-94j7-hjx9
Moodle has a SQL injection risk in course search module list filter
GHSA-rfv4-mv3r-qx66
A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting (XSS) attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary script in the victim's browser.
GHSA-rc65-mhj4-hp4r
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
GHSA-r9pc-g29w-f86j
Moodle sensitive information disclosure
GHSA-r99q-hmqv-xw8w
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
GHSA-r867-v437-4rrm
Moodle Cross-site request forgery (CSRF) vulnerability
GHSA-r82w-3phg-qvr4
Moodle uses the same key for QR login and auto-login
GHSA-r7cj-2ghq-wj88
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.
GHSA-r729-mx2r-j26j
Moodle XSS Vulnerability
GHSA-r6j4-gmpg-6x9f
The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.
GHSA-r4xr-m393-778m
Moodle IDOR when accessing list of course badges
GHSA-r4vq-7rgp-99hx
mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums.
GHSA-r3fc-hx6q-g6cq
Moodle allows attackers to discover student e-mail addresses
GHSA-r2wx-46gp-rp3h
Moodle Improper Input Validation
GHSA-r227-v24c-j96q
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."
GHSA-qw6v-v9vc-qfvq
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.
GHSA-qv78-6gpp-hm68
Moodle Open Redirect vulnerability
GHSA-qv3v-qfq2-p7vh
lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI.
GHSA-qrqv-26gf-xgwh
Moodle LFI vulnerability when restoring malformed block backups
GHSA-qrcj-6fjw-3h9h
Moodle XSS Vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-rg56-94j7-hjx9 Moodle has a SQL injection risk in course search module list filter | CVSS3: 8.1 | 1% Низкий | больше 1 года назад |
| GHSA-rfv4-mv3r-qx66 A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cross-site scripting (XSS) attack. By convincing an unauthenticated user to access a specially crafted password reset link, an attacker could execute arbitrary script in the victim's browser. | CVSS3: 4.3 | 0% Низкий | около 1 месяца назад |
| GHSA-rc65-mhj4-hp4r The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance. | CVSS3: 5.3 | 0% Низкий | около 1 года назад |
| GHSA-r9pc-g29w-f86j Moodle sensitive information disclosure | CVSS3: 5.3 | 2% Низкий | больше 4 лет назад |
| GHSA-r99q-hmqv-xw8w Moodle Authenticated LFI risk in some misconfigured shared hosting environments | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| GHSA-r867-v437-4rrm Moodle Cross-site request forgery (CSRF) vulnerability | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| GHSA-r82w-3phg-qvr4 Moodle uses the same key for QR login and auto-login | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| GHSA-r7cj-2ghq-wj88 jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. | 3% Низкий | больше 4 лет назад | |
| GHSA-r729-mx2r-j26j Moodle XSS Vulnerability | 2% Низкий | больше 4 лет назад | |
| GHSA-r6j4-gmpg-6x9f The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors. | 1% Низкий | больше 4 лет назад | |
| GHSA-r4xr-m393-778m Moodle IDOR when accessing list of course badges | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| GHSA-r4vq-7rgp-99hx mod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not consider whether a forum is optional, which allows remote authenticated users to bypass forum-subscription requirements by leveraging the student role and unsubscribing from all forums. | 2% Низкий | больше 4 лет назад | |
| GHSA-r3fc-hx6q-g6cq Moodle allows attackers to discover student e-mail addresses | CVSS3: 4.3 | 2% Низкий | больше 4 лет назад |
| GHSA-r2wx-46gp-rp3h Moodle Improper Input Validation | 1% Низкий | больше 2 лет назад | |
| GHSA-r227-v24c-j96q The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants." | CVSS3: 4.3 | 2% Низкий | больше 4 лет назад |
| GHSA-qw6v-v9vc-qfvq The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search. | 2% Низкий | больше 4 лет назад | |
| GHSA-qv78-6gpp-hm68 Moodle Open Redirect vulnerability | CVSS3: 3.5 | 0% Низкий | 9 месяцев назад |
| GHSA-qv3v-qfq2-p7vh lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI. | 1% Низкий | больше 4 лет назад | |
| GHSA-qrqv-26gf-xgwh Moodle LFI vulnerability when restoring malformed block backups | CVSS3: 7.5 | 1% Низкий | около 2 лет назад |
| GHSA-qrcj-6fjw-3h9h Moodle XSS Vulnerability | CVSS3: 4.8 | 2% Низкий | больше 4 лет назад |
Уязвимостей на страницу