Поиск уязвимостей
Количество 2 764
Количество 2 764
GHSA-cw72-69wq-f9f2
Moodle External function mod_assign_save_submission does not check due dates
GHSA-cw24-f6fq-7j9v
Moodle allows teachers to evade trusttext config when restoring glossary entries
GHSA-crcq-pw8h-9xwf
Moodle does not provide charset information in HTTP headers
GHSA-cr78-rphw-w73p
Moodle Arbitrary File Read via Backup Functionality
GHSA-cq5f-wv7p-5gfc
Moodle leaks user names
GHSA-cpp3-82c5-xhqm
Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/.
GHSA-cpm7-mv33-jwf8
Moodle's AJAX section delete does not respect course_can_delete_section()
GHSA-cp8m-h777-g4p3
Improper Access Control in moodle
GHSA-cp39-43xr-2wrp
Moodle XSS Vulnerability
GHSA-cm4r-58pj-h2ph
Moodle allows attackers to extract archives to arbitrary directories
GHSA-cjrf-xg77-chpw
Moodle Incorrect sanitation of attributes in forums
GHSA-cj27-r58c-6p6v
Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
GHSA-chmf-m33p-ph8m
Moodle allows IDOR in RSS block, which allows access to additional RSS feeds
GHSA-ch68-5r37-p7c3
Moodle cross-site scripting (XSS) vulnerability
GHSA-cgvv-3455-824j
Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter
GHSA-cg8j-5cr2-568q
Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits
GHSA-cfc8-jvc8-5w3f
SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data.
GHSA-ccwc-3v75-qp35
Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
GHSA-cc94-hwj3-rf65
Moodle's login_as feature leaks information from external repositories
GHSA-c9jp-244j-vh78
Moodle cross-site scripting (XSS) vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-cw72-69wq-f9f2 Moodle External function mod_assign_save_submission does not check due dates | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-cw24-f6fq-7j9v Moodle allows teachers to evade trusttext config when restoring glossary entries | CVSS3: 3.1 | 0% Низкий | больше 1 года назад |
| GHSA-crcq-pw8h-9xwf Moodle does not provide charset information in HTTP headers | 2% Низкий | больше 4 лет назад | |
| GHSA-cr78-rphw-w73p Moodle Arbitrary File Read via Backup Functionality | 1% Низкий | больше 4 лет назад | |
| GHSA-cq5f-wv7p-5gfc Moodle leaks user names | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
| GHSA-cpp3-82c5-xhqm Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote attackers to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/. | 4% Низкий | больше 4 лет назад | |
| GHSA-cpm7-mv33-jwf8 Moodle's AJAX section delete does not respect course_can_delete_section() | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| GHSA-cp8m-h777-g4p3 Improper Access Control in moodle | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
| GHSA-cp39-43xr-2wrp Moodle XSS Vulnerability | 3% Низкий | больше 4 лет назад | |
| GHSA-cm4r-58pj-h2ph Moodle allows attackers to extract archives to arbitrary directories | 2% Низкий | больше 4 лет назад | |
| GHSA-cjrf-xg77-chpw Moodle Incorrect sanitation of attributes in forums | CVSS3: 5.3 | 1% Низкий | больше 4 лет назад |
| GHSA-cj27-r58c-6p6v Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter. | 1% Низкий | больше 4 лет назад | |
| GHSA-chmf-m33p-ph8m Moodle allows IDOR in RSS block, which allows access to additional RSS feeds | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| GHSA-ch68-5r37-p7c3 Moodle cross-site scripting (XSS) vulnerability | 2% Низкий | больше 4 лет назад | |
| GHSA-cgvv-3455-824j Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter | CVSS3: 4.2 | 0% Низкий | больше 1 года назад |
| GHSA-cg8j-5cr2-568q Moodle TeX formula editor is vulnerable to DoS through lack of execution time limits | CVSS3: 6.5 | 1% Низкий | 9 месяцев назад |
| GHSA-cfc8-jvc8-5w3f SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data. | 2% Низкий | больше 4 лет назад | |
| GHSA-ccwc-3v75-qp35 Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified. | 2% Низкий | больше 4 лет назад | |
| GHSA-cc94-hwj3-rf65 Moodle's login_as feature leaks information from external repositories | 2% Низкий | больше 4 лет назад | |
| GHSA-c9jp-244j-vh78 Moodle cross-site scripting (XSS) vulnerability | 5% Низкий | больше 4 лет назад |
Уязвимостей на страницу