Логотип exploitDog
product: "moodle"
Консоль
Логотип exploitDog

exploitDog

product: "moodle"

Количество 2 470

Количество 2 470

debian логотип

CVE-2006-4935

почти 19 лет назад

The Database module in Moodle before 1.6.2 does not properly handle up ...

CVSS2: 10
EPSS: Низкий
ubuntu логотип

CVE-2006-4786

почти 19 лет назад

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2006-4786

почти 19 лет назад

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2006-4786

почти 19 лет назад

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive i ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2006-4785

почти 19 лет назад

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2006-4785

почти 19 лет назад

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2006-4785

почти 19 лет назад

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earli ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2006-4784

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2006-4784

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2006-4784

почти 19 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 an ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2005-3649

больше 19 лет назад

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.

CVSS2: 2.6
EPSS: Низкий
nvd логотип

CVE-2005-3649

больше 19 лет назад

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.

CVSS2: 2.6
EPSS: Низкий
debian логотип

CVE-2005-3649

больше 19 лет назад

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users t ...

CVSS2: 2.6
EPSS: Низкий
ubuntu логотип

CVE-2005-3648

больше 19 лет назад

Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2005-3648

больше 19 лет назад

Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2005-3648

больше 19 лет назад

Multiple SQL injection vulnerabilities in the get_record function in d ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2005-2247

почти 20 лет назад

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.

CVSS2: 10
EPSS: Низкий
nvd логотип

CVE-2005-2247

почти 20 лет назад

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.

CVSS2: 10
EPSS: Низкий
debian логотип

CVE-2005-2247

почти 20 лет назад

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown i ...

CVSS2: 10
EPSS: Низкий
nvd логотип

CVE-2004-2237

больше 20 лет назад

Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."

CVSS2: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2006-4935

The Database module in Moodle before 1.6.2 does not properly handle up ...

CVSS2: 10
0%
Низкий
почти 19 лет назад
ubuntu логотип
CVE-2006-4786

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.

CVSS2: 5
0%
Низкий
почти 19 лет назад
nvd логотип
CVE-2006-4786

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.

CVSS2: 5
0%
Низкий
почти 19 лет назад
debian логотип
CVE-2006-4786

Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive i ...

CVSS2: 5
0%
Низкий
почти 19 лет назад
ubuntu логотип
CVE-2006-4785

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.

CVSS2: 7.5
2%
Низкий
почти 19 лет назад
nvd логотип
CVE-2006-4785

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.

CVSS2: 7.5
2%
Низкий
почти 19 лет назад
debian логотип
CVE-2006-4785

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earli ...

CVSS2: 7.5
2%
Низкий
почти 19 лет назад
ubuntu логотип
CVE-2006-4784

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php.

CVSS2: 4.3
0%
Низкий
почти 19 лет назад
nvd логотип
CVE-2006-4784

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php.

CVSS2: 4.3
0%
Низкий
почти 19 лет назад
debian логотип
CVE-2006-4784

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 an ...

CVSS2: 4.3
0%
Низкий
почти 19 лет назад
ubuntu логотип
CVE-2005-3649

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.

CVSS2: 2.6
8%
Низкий
больше 19 лет назад
nvd логотип
CVE-2005-3649

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.

CVSS2: 2.6
8%
Низкий
больше 19 лет назад
debian логотип
CVE-2005-3649

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users t ...

CVSS2: 2.6
8%
Низкий
больше 19 лет назад
ubuntu логотип
CVE-2005-3648

Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.

CVSS2: 7.5
1%
Низкий
больше 19 лет назад
nvd логотип
CVE-2005-3648

Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.

CVSS2: 7.5
1%
Низкий
больше 19 лет назад
debian логотип
CVE-2005-3648

Multiple SQL injection vulnerabilities in the get_record function in d ...

CVSS2: 7.5
1%
Низкий
больше 19 лет назад
ubuntu логотип
CVE-2005-2247

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.

CVSS2: 10
0%
Низкий
почти 20 лет назад
nvd логотип
CVE-2005-2247

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.

CVSS2: 10
0%
Низкий
почти 20 лет назад
debian логотип
CVE-2005-2247

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown i ...

CVSS2: 10
0%
Низкий
почти 20 лет назад
nvd логотип
CVE-2004-2237

Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."

CVSS2: 10
0%
Низкий
больше 20 лет назад

Уязвимостей на страницу