Поиск уязвимостей
Количество 2 764
Количество 2 764
GHSA-3hmr-948v-5qgq
Moodle Cross-Site Request Forgery (CSRF)
GHSA-3gm8-32vv-q8mp
Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter
GHSA-3fj7-9j8m-7r8g
Moodle Stored HTML in assignment submission comments allowed links to be opened directly
GHSA-3f43-8vw5-xcf9
Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field.
GHSA-398j-f7m7-795j
PHPMailer vulnerable to email header injection
GHSA-389j-qw4x-m76h
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.
GHSA-382v-gxj9-ffhc
Moodle uses predictable password-recovery tokens
GHSA-37mm-gc69-pw8r
Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title).
GHSA-36cm-vrqh-8p98
Moodle allows attackers to cause a denial of service
GHSA-35wf-3wq2-r3hx
Moodle has Incorrect Default Permissions
GHSA-35pr-gqm6-r366
Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information
GHSA-358r-g2xw-7c83
Moodle backs up private files
GHSA-356g-7x36-7m34
Moodle CSRF risks due to misuse of confirm_sesskey
GHSA-34g7-pg9j-pxgp
Moodle allows IDOR when accessing the cohorts report
GHSA-345q-9jmq-g9q4
Moodle allows unauthenticated REST API user data exposure
GHSA-332g-xh34-5c96
Moodle Privilege escalation in quiz web services
GHSA-32jc-9p58-p82x
Moodle Improper Access Control vulnerability
GHSA-32hg-73hp-vwc8
Moodle allows attackers to modify "Exclude grade" settings
GHSA-2x36-7xfm-pgm7
Moodle default permissions too permissive
GHSA-2wmj-8mqg-r9q8
Moodle has Incorrect Default Permissions
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-3hmr-948v-5qgq Moodle Cross-Site Request Forgery (CSRF) | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-3gm8-32vv-q8mp Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter | 2% Низкий | больше 4 лет назад | |
| GHSA-3fj7-9j8m-7r8g Moodle Stored HTML in assignment submission comments allowed links to be opened directly | CVSS3: 6.1 | 1% Низкий | больше 4 лет назад |
| GHSA-3f43-8vw5-xcf9 Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the conditional access rule value of a user field. | 1% Низкий | больше 4 лет назад | |
| GHSA-398j-f7m7-795j PHPMailer vulnerable to email header injection | 2% Низкий | около 4 лет назад | |
| GHSA-389j-qw4x-m76h Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php. | 2% Низкий | больше 4 лет назад | |
| GHSA-382v-gxj9-ffhc Moodle uses predictable password-recovery tokens | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
| GHSA-37mm-gc69-pw8r Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title). | 2% Низкий | больше 4 лет назад | |
| GHSA-36cm-vrqh-8p98 Moodle allows attackers to cause a denial of service | 2% Низкий | больше 4 лет назад | |
| GHSA-35wf-3wq2-r3hx Moodle has Incorrect Default Permissions | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| GHSA-35pr-gqm6-r366 Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information | 2% Низкий | больше 4 лет назад | |
| GHSA-358r-g2xw-7c83 Moodle backs up private files | CVSS3: 7.5 | 2% Низкий | больше 4 лет назад |
| GHSA-356g-7x36-7m34 Moodle CSRF risks due to misuse of confirm_sesskey | CVSS3: 5.4 | 0% Низкий | больше 2 лет назад |
| GHSA-34g7-pg9j-pxgp Moodle allows IDOR when accessing the cohorts report | CVSS3: 4.3 | 0% Низкий | больше 1 года назад |
| GHSA-345q-9jmq-g9q4 Moodle allows unauthenticated REST API user data exposure | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| GHSA-332g-xh34-5c96 Moodle Privilege escalation in quiz web services | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-32jc-9p58-p82x Moodle Improper Access Control vulnerability | CVSS3: 8.2 | 1% Низкий | больше 3 лет назад |
| GHSA-32hg-73hp-vwc8 Moodle allows attackers to modify "Exclude grade" settings | CVSS3: 4.3 | 2% Низкий | больше 4 лет назад |
| GHSA-2x36-7xfm-pgm7 Moodle default permissions too permissive | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-2wmj-8mqg-r9q8 Moodle has Incorrect Default Permissions | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу