Поиск уязвимостей
Количество 2 764
Количество 2 764
GHSA-fj6p-g234-rrv3
Exposure of Sensitive Information in moodle
GHSA-fhgh-fjh9-vq62
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
GHSA-fhg2-r2h9-h7q8
Moodle IDOR when deleting OAuth2 linked accounts
GHSA-ffr2-q8c8-w5xj
login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote attackers to obtain credentials by sniffing the network.
GHSA-fcqv-w7xc-5vmc
Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity.
GHSA-fcpw-vqh5-6qwj
Moodle reflected XSS Vulnerability
GHSA-fccf-p8fx-vjj4
Moodle vulnerable to PHP object injection attacks
GHSA-fc5p-vj3h-x7g4
Moodle allows attackers to obtain sensitive information
GHSA-f9m9-494r-w36p
Moodle allows bypass of intended access restrictions
GHSA-f7qm-q26p-6rr2
Moodle cross-site scripting (XSS) vulnerability
GHSA-f6mh-79vh-2hv7
Cross-site Scripting in Moodle Chat
GHSA-f6hv-6fvm-7xr9
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a different group's users via an advanced search.
GHSA-f66h-6mj2-rwj2
Moodle multiple cross-site scripting (XSS) vulnerabilities
GHSA-f5r8-7h4f-jr9x
Moodle incorrect access control
GHSA-f5pm-c4cw-563p
Moodle cross-site request forgery (CSRF) vulnerability
GHSA-f46j-r7q3-6cm2
Moodle SQL Injection vulnerability
GHSA-f439-48pp-hm2q
Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies.
GHSA-cxp8-jjf5-6whc
Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question.
GHSA-cx8w-wqgc-mpmh
Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository.
GHSA-cwhp-rqfr-8462
Moodle XSS Vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-fj6p-g234-rrv3 Exposure of Sensitive Information in moodle | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-fhgh-fjh9-vq62 Moodle allows remote authenticated users to cause a denial of service (invalid database records) | 2% Низкий | больше 4 лет назад | |
| GHSA-fhg2-r2h9-h7q8 Moodle IDOR when deleting OAuth2 linked accounts | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
| GHSA-ffr2-q8c8-w5xj login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote attackers to obtain credentials by sniffing the network. | 2% Низкий | больше 4 лет назад | |
| GHSA-fcqv-w7xc-5vmc Cross Site Scripting vulnerability in Moodle CMS v3.10 allows a remote attacker to execute arbitrary code via the Field Name (name parameter) of a new activity. | CVSS3: 5.5 | 1% Низкий | больше 2 лет назад |
| GHSA-fcpw-vqh5-6qwj Moodle reflected XSS Vulnerability | CVSS3: 6.1 | 1% Низкий | около 4 лет назад |
| GHSA-fccf-p8fx-vjj4 Moodle vulnerable to PHP object injection attacks | 4% Низкий | больше 4 лет назад | |
| GHSA-fc5p-vj3h-x7g4 Moodle allows attackers to obtain sensitive information | 2% Низкий | больше 4 лет назад | |
| GHSA-f9m9-494r-w36p Moodle allows bypass of intended access restrictions | 1% Низкий | больше 4 лет назад | |
| GHSA-f7qm-q26p-6rr2 Moodle cross-site scripting (XSS) vulnerability | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
| GHSA-f6mh-79vh-2hv7 Cross-site Scripting in Moodle Chat | CVSS3: 5.4 | 1% Низкий | больше 2 лет назад |
| GHSA-f6hv-6fvm-7xr9 The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to read activity entries of a different group's users via an advanced search. | 1% Низкий | больше 4 лет назад | |
| GHSA-f66h-6mj2-rwj2 Moodle multiple cross-site scripting (XSS) vulnerabilities | 2% Низкий | больше 4 лет назад | |
| GHSA-f5r8-7h4f-jr9x Moodle incorrect access control | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| GHSA-f5pm-c4cw-563p Moodle cross-site request forgery (CSRF) vulnerability | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| GHSA-f46j-r7q3-6cm2 Moodle SQL Injection vulnerability | CVSS3: 9.8 | 52% Средний | больше 3 лет назад |
| GHSA-f439-48pp-hm2q Moodle LMS 4.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting payloads through the search parameter. Attackers can inject JavaScript code via the search field in course/search.php to execute arbitrary scripts in users' browsers and steal session cookies. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| GHSA-cxp8-jjf5-6whc Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an answer to a text-based quiz question. | 1% Низкий | больше 4 лет назад | |
| GHSA-cx8w-wqgc-mpmh Cross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 allows remote authenticated administrators to inject arbitrary web script or HTML by renaming a repository. | 1% Низкий | больше 4 лет назад | |
| GHSA-cwhp-rqfr-8462 Moodle XSS Vulnerability | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу