Поиск уязвимостей
Количество 2 764
Количество 2 764
GHSA-p269-r9cq-frhv
Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page.
GHSA-p239-x7hg-j3w6
blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote attackers to obtain sensitive information by reading this feed.
GHSA-mxp2-wcjh-jf72
The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.
GHSA-mx26-62xm-2p83
Moodle vulnerable to site administration SQL injection via XMLDB editor
GHSA-mw6p-49jf-9935
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page
GHSA-mrrv-fq8p-rp6j
Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php
GHSA-mr97-gvvg-rhgh
Moodle Exposes Sensitive User Information
GHSA-mpjx-8phj-5m34
Moodle Allows Unauthenticated Dropbox Access
GHSA-mphj-h2fc-62x3
Moodle allows attackers to bypass the mod/lti:view capability requirement
GHSA-mmvj-j7hq-rx85
Moodle sensitive information disclosure
GHSA-mm9q-3847-m48x
Moodle allows attackers to enter additional answer attempts
GHSA-mm9p-xwfm-3fqf
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
GHSA-mm73-86f9-5x5c
Moodle Grade information disclosure in grade's external fetch functions
GHSA-mj85-3hqq-r6r9
Moodle Reflected XSS in mod_data advanced search
GHSA-mhf6-pp52-8wqj
Moodle Cross-site Scripting (XSS) vulnerability
GHSA-mgqq-8x9v-jp4r
lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable blank passwords.
GHSA-mgfp-qcf2-pw3m
Moodle stored Cross-site Scripting (XSS)
GHSA-mg69-5q59-8jcg
Moodle does not enforce the moodle/site:accessallgroups capability requirement
GHSA-mg54-p2wj-5ph7
moodle: IDOR when fetching report schedules
GHSA-m98q-q59p-r9fv
Moodle open redirect vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-p269-r9cq-frhv Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page. | 1% Низкий | больше 4 лет назад | |
| GHSA-p239-x7hg-j3w6 blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote attackers to obtain sensitive information by reading this feed. | 1% Низкий | больше 4 лет назад | |
| GHSA-mxp2-wcjh-jf72 The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record. | 1% Низкий | больше 4 лет назад | |
| GHSA-mx26-62xm-2p83 Moodle vulnerable to site administration SQL injection via XMLDB editor | CVSS3: 7.2 | 1% Низкий | около 2 лет назад |
| GHSA-mw6p-49jf-9935 Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page | 2% Низкий | больше 4 лет назад | |
| GHSA-mrrv-fq8p-rp6j Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php | 1% Низкий | больше 4 лет назад | |
| GHSA-mr97-gvvg-rhgh Moodle Exposes Sensitive User Information | 1% Низкий | больше 4 лет назад | |
| GHSA-mpjx-8phj-5m34 Moodle Allows Unauthenticated Dropbox Access | 1% Низкий | больше 4 лет назад | |
| GHSA-mphj-h2fc-62x3 Moodle allows attackers to bypass the mod/lti:view capability requirement | 2% Низкий | больше 4 лет назад | |
| GHSA-mmvj-j7hq-rx85 Moodle sensitive information disclosure | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-mm9q-3847-m48x Moodle allows attackers to enter additional answer attempts | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| GHSA-mm9p-xwfm-3fqf Moodle Authenticated LFI risk in some misconfigured shared hosting environments | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| GHSA-mm73-86f9-5x5c Moodle Grade information disclosure in grade's external fetch functions | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-mj85-3hqq-r6r9 Moodle Reflected XSS in mod_data advanced search | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
| GHSA-mhf6-pp52-8wqj Moodle Cross-site Scripting (XSS) vulnerability | CVSS3: 7.3 | 0% Низкий | 9 месяцев назад |
| GHSA-mgqq-8x9v-jp4r lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable blank passwords. | 2% Низкий | больше 4 лет назад | |
| GHSA-mgfp-qcf2-pw3m Moodle stored Cross-site Scripting (XSS) | CVSS3: 6.1 | 4% Низкий | больше 4 лет назад |
| GHSA-mg69-5q59-8jcg Moodle does not enforce the moodle/site:accessallgroups capability requirement | 1% Низкий | больше 4 лет назад | |
| GHSA-mg54-p2wj-5ph7 moodle: IDOR when fetching report schedules | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| GHSA-m98q-q59p-r9fv Moodle open redirect vulnerability | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу