Поиск уязвимостей

Moodle cross-site scripting (XSS) vulnerability

Moodle Authentication Bypass in File Upload

Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."

Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors.

A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an authenticated user with grade management permissions into visiting a malicious webpage, an attacker can trigger unauthorized requests on the victim's behalf. This flaw allows a remote attacker to set or overwrite student grades without authorization.

Incorrect Calculation in moodle

Moodle vulnerable to stored Cross-site Scripting

Moodle Information Disclosure

Moodle has a time restriction bypass

Moodle Portfolio script allows instantiation of class chosen by user

Moodle Portfolio forum caller class allows a user to download any file

Improper Access Control in moodle

Moodle vulnerable to Cross-site Scripting

Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user accounts via unspecified vectors.

Moodle Unsanitized HTML in site log for config_log_created

Moodle Exposure of Sensitive Information to an Unauthorized Actor

Moodle allows attackers to upload files containing JavaScript

Moodle vulnerable to RCE

Moodle admin presets export tool includes some secrets that should not be exported

Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor