moodle vulnerabilities (Debian)

66 vulnerabilities.

• moodle Debian PHPMailer vulnerable to email header injection CVE-2012-0796 Fix available 4.0 MediumFebruary 29, 2012
• moodle Debian Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does... CVE-2012-0795 6.5 MediumFebruary 29, 2012
• moodle Debian The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2... CVE-2012-0794 5.0 MediumFebruary 29, 2012
• moodle Debian Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows... CVE-2012-0793 5.0 MediumFebruary 29, 2012
• moodle Debian mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the... CVE-2012-0792 4.0 MediumFebruary 29, 2012
• moodle Debian The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect... CVE-2011-4588 5.0 MediumFebruary 29, 2012
• moodle Debian lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does... CVE-2011-4587 6.8 MediumFebruary 29, 2012
• moodle Debian CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before... CVE-2011-4586 5.0 MediumFebruary 29, 2012
• moodle Debian login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change... CVE-2011-4585 5.0 MediumFebruary 29, 2012
• moodle Debian The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1... CVE-2011-4584 4.0 MediumFebruary 29, 2012
• moodle Debian mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2... CVE-2011-4308 4.0 MediumFebruary 29, 2012
• moodle Debian Moodle XSS Vulnerability CVE-2011-4306 Fix available 4.3 MediumNovember 7, 2011
• moodle Debian message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a... CVE-2011-4305 4.0 MediumNovember 7, 2011
• moodle Debian mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x... CVE-2011-4302 6.8 MediumNovember 7, 2011
• moodle Debian Moodle Allows Modification of Constants CVE-2011-4301 Fix available 5.0 MediumNovember 7, 2011
• moodle Debian Moodle Open Redirect Via Error Messages CVE-2011-4294 Fix available 5.8 MediumNovember 7, 2011
• moodle Debian Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9... CVE-2011-4290 4.3 MediumJune 16, 2011
• moodle Debian Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations... CVE-2011-4288 4.0 MediumJune 16, 2011
• moodle Debian Moodle vulnerable to Cross-site Scripting CVE-2011-4286 Fix available 4.3 MediumJune 16, 2011
• moodle Debian Moodle allows remote attackers to obtain sensitive information CVE-2011-4283 Fix available 5.0 MediumJune 16, 2011
• moodle Debian Moodle XSS In Tag Autocomplete functionality CVE-2011-4278 Fix available 4.3 MediumJune 16, 2011
• moodle Debian Moodle vulnerable to Cross-Site Request Forgery CVE-2011-4133 Fix available 6.8 MediumJune 16, 2011
• moodle Debian Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3,... CVE-2010-3692 6.4 MediumOctober 7, 2010
• moodle Debian PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to... CVE-2010-3691 3.3 LowOctober 7, 2010
• moodle Debian Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is... CVE-2010-3690 4.3 MediumOctober 7, 2010
• moodle Debian Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled,... CVE-2010-2796 2.6 LowAugust 5, 2010
• moodle Debian phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string... CVE-2010-2795 4.0 MediumAugust 5, 2010
• moodle Debian Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module... CVE-2010-2231 6.8 MediumJune 28, 2010
• moodle Debian Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter CVE-2010-2230 Fix available 4.0 MediumJune 28, 2010
• moodle Debian Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and... CVE-2010-2229 4.3 MediumJune 28, 2010
• moodle Debian Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1... CVE-2010-2228 4.3 MediumJune 28, 2010
• moodle Debian Moodle vulnerable to Cross-site Scripting CVE-2010-1619 Fix available 4.3 MediumApril 29, 2010
• moodle Debian phpCAS client library and Moodle Cross-site Scripting vulnerability CVE-2010-1618 Fix available 4.3 MediumApril 29, 2010
• moodle Debian Moodle doesn't properly check role CVE-2010-1617 Fix available 4.0 MediumApril 29, 2010
• moodle Debian Moodle is vulnerable to unauthorized new accounts creation CVE-2010-1616 Fix available 4.0 MediumApril 29, 2010
• moodle Debian Moodle vulnerable to SQL injection CVE-2010-1615 Fix available 7.5 HighApril 29, 2010
• moodle Debian Moodle vulnerable to Cross-site Scripting CVE-2010-1614 Fix available 4.3 MediumApril 29, 2010
• moodle Debian Moodle Session Fixation vulnerability CVE-2010-1613 Fix available 6.8 MediumApril 29, 2010
• moodle Debian SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7... CVE-2009-4305 6.5 MediumDecember 16, 2009
• moodle Debian Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php,... CVE-2009-4304 7.5 HighDecember 16, 2009
• moodle Debian Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified ... CVE-2009-4303 5.0 MediumDecember 16, 2009
• moodle Debian login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on... CVE-2009-4302 5.0 MediumDecember 16, 2009
• moodle Debian mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled,... CVE-2009-4301 6.0 MediumDecember 16, 2009
• moodle Debian Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7... CVE-2009-4300 5.0 MediumDecember 16, 2009
• moodle Debian mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9... CVE-2009-4299 5.0 MediumDecember 16, 2009
• moodle Debian The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1)... CVE-2009-4298 5.0 MediumDecember 16, 2009
• moodle Debian Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9... CVE-2009-4297 6.8 MediumDecember 16, 2009
• moodle Debian The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1... CVE-2009-1171 Public exploitFix available 4.3 MediumMarch 30, 2009
• moodle Debian Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1... CVE-2008-6125 6.5 MediumFebruary 13, 2009
• moodle Debian Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used... CVE-2009-0502 4.3 MediumFebruary 10, 2009
• Show olderLoading…