Поиск уязвимостей
Количество 2 764
Количество 2 764
GHSA-hxmp-8f47-x9fc
Moodle Open Redirect Via Error Messages
GHSA-hxgg-4qww-85ph
Moodle has reflected Cross-site Scripting risk in policy tool
GHSA-hwjw-22qj-gpvc
Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results
GHSA-hwjv-mc78-cccj
Moodle multiple cross-site scripting (XSS) vulnerabilities
GHSA-hvr9-w78p-rcfj
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could allow an attacker to view, alter, or delete sensitive data stored in the underlying database.
GHSA-hpwm-84h5-vqr8
Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames
GHSA-hpmv-wvq3-gj27
Moodle cross-site request forgery (CSRF) vulnerability
GHSA-hp4v-c3h7-rwmx
mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.
GHSA-hjrj-7wcj-7j3c
Moodle sensitive information disclosure
GHSA-hjgc-jxjc-8v9j
Moodle reflected XSS via H5P error message
GHSA-hj48-8q8c-q7g9
Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.
GHSA-hhxf-w8hj-43w6
Moodle vulnerable to Cross-site Scripting
GHSA-hhq7-jf2p-hw9c
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GHSA-hh52-g5c4-wprh
Moodle may allow authenticated users to enumerate other user's names via learning plans page
GHSA-hgw3-h5hf-vjv2
Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/action_redir group messages, which allows remote authenticated users to discover e-mail addresses by visiting the messaging interface.
GHSA-hcm6-q6pc-xfhm
Moodle has an authorization logic flaw
GHSA-hchv-4gm2-gf5h
mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a forum.
GHSA-h9w8-4376-j344
Moodle does not properly validate module instance id
GHSA-h8vc-v44p-5r2q
Moodle provides calendar-event data without considering whether an activity is hidden
GHSA-h8m4-h385-qhqv
Moodle Cross-site Scripting
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-hxmp-8f47-x9fc Moodle Open Redirect Via Error Messages | 2% Низкий | больше 4 лет назад | |
| GHSA-hxgg-4qww-85ph Moodle has reflected Cross-site Scripting risk in policy tool | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| GHSA-hwjw-22qj-gpvc Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results | 1% Низкий | больше 4 лет назад | |
| GHSA-hwjv-mc78-cccj Moodle multiple cross-site scripting (XSS) vulnerabilities | 1% Низкий | больше 4 лет назад | |
| GHSA-hvr9-w78p-rcfj A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could allow an attacker to view, alter, or delete sensitive data stored in the underlying database. | CVSS3: 5.5 | 0% Низкий | около 1 месяца назад |
| GHSA-hpwm-84h5-vqr8 Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames | CVSS3: 6.5 | 1% Низкий | больше 4 лет назад |
| GHSA-hpmv-wvq3-gj27 Moodle cross-site request forgery (CSRF) vulnerability | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-hp4v-c3h7-rwmx mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate. | 1% Низкий | больше 4 лет назад | |
| GHSA-hjrj-7wcj-7j3c Moodle sensitive information disclosure | CVSS3: 4.3 | 2% Низкий | больше 4 лет назад |
| GHSA-hjgc-jxjc-8v9j Moodle reflected XSS via H5P error message | CVSS3: 5.4 | 0% Низкий | почти 2 года назад |
| GHSA-hj48-8q8c-q7g9 Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter. | 1% Низкий | больше 4 лет назад | |
| GHSA-hhxf-w8hj-43w6 Moodle vulnerable to Cross-site Scripting | 2% Низкий | больше 4 лет назад | |
| GHSA-hhq7-jf2p-hw9c Moodle multiple cross-site request forgery (CSRF) vulnerabilities | 1% Низкий | больше 4 лет назад | |
| GHSA-hh52-g5c4-wprh Moodle may allow authenticated users to enumerate other user's names via learning plans page | CVSS3: 4.3 | 1% Низкий | больше 3 лет назад |
| GHSA-hgw3-h5hf-vjv2 Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/action_redir group messages, which allows remote authenticated users to discover e-mail addresses by visiting the messaging interface. | 2% Низкий | больше 4 лет назад | |
| GHSA-hcm6-q6pc-xfhm Moodle has an authorization logic flaw | CVSS3: 5.4 | 0% Низкий | 9 месяцев назад |
| GHSA-hchv-4gm2-gf5h mod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly implement the requirement for posting before reading a Q&A forum, which allows remote authenticated users to bypass intended access restrictions by leveraging the student role and reading the RSS feed for a forum. | 1% Низкий | больше 4 лет назад | |
| GHSA-h9w8-4376-j344 Moodle does not properly validate module instance id | 2% Низкий | больше 4 лет назад | |
| GHSA-h8vc-v44p-5r2q Moodle provides calendar-event data without considering whether an activity is hidden | CVSS3: 4.3 | 2% Низкий | больше 4 лет назад |
| GHSA-h8m4-h385-qhqv Moodle Cross-site Scripting | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу