Skip to content

Moodle vulnerabilities

Products

Newest

moodle, snoopy +1 moreCross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used...CVE-2009-05024.3 MediumFebruary 10, 2009
moodleUnspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9...CVE-2009-05015.0 MediumFebruary 10, 2009
moodleCross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before...CVE-2009-05004.3 MediumFebruary 10, 2009
moodleCross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8...CVE-2009-04996.4 MediumFebruary 10, 2009
moodle, debian linux +1 moreSQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the...CVE-2008-61247.5 HighDecember 22, 2008
moodleCross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8...CVE-2008-54324.3 MediumDecember 11, 2008
moodleMoodle vulnerable to symlink attackCVE-2008-5153Fix available6.9 MediumNovember 18, 2008
moodleMoodle 1.6.5, when display_errors is enabled, allows remote attackers to obtain sensitive...CVE-2008-33274.3 MediumJuly 25, 2008
moodleCross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x...CVE-2008-33262.6 LowJuly 25, 2008
moodle, debian linux +1 moreCross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7...CVE-2008-33256.0 MediumJuly 25, 2008
egroupware, moodle +1 moreMoodle vulnerable to Cross-site scriptingCVE-2008-1502Fix availableEPSS 10.5%4.3 MediumMarch 25, 2008
moodleCross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other...CVE-2008-0123Public exploit4.3 MediumJanuary 12, 2008
moodleCross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to...CVE-2007-3555Public exploit4.3 MediumJuly 4, 2007
moodleMoodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access...CVE-2007-1647Public exploit7.8 HighMarch 24, 2007
moodleMultiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to...CVE-2007-14297.5 HighMarch 13, 2007
moodleCross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote...CVE-2006-66266.8 MediumDecember 18, 2006
moodleCross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote...CVE-2006-6625Public exploit6.8 MediumDecember 18, 2006
moodleSQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote...CVE-2006-5219Public exploit5.1 MediumOctober 9, 2006
moodlecourse/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before...CVE-2006-49435.0 MediumSeptember 23, 2006
moodleMoodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote...CVE-2006-49424.6 MediumSeptember 23, 2006
moodleMultiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote...CVE-2006-49414.3 MediumSeptember 23, 2006
moodlelogin/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive...CVE-2006-49405.0 MediumSeptember 23, 2006
moodlebackup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup...CVE-2006-49395.0 MediumSeptember 23, 2006
moodlehelp.php in Moodle before 1.6.2 does not check the existence of certain help files before...CVE-2006-49384.0 MediumSeptember 23, 2006
moodlelib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING...CVE-2006-49374.0 MediumSeptember 23, 2006
moodleMoodle does not properly validate module instance idCVE-2006-4936Fix available10.0 HighSeptember 23, 2006
moodleThe Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has...CVE-2006-493510.0 HighSeptember 23, 2006
moodleMoodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php...CVE-2006-47865.0 MediumSeptember 14, 2006
moodleSQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers...CVE-2006-47857.5 HighSeptember 14, 2006
moodleMultiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow...CVE-2006-47844.3 MediumSeptember 14, 2006
john lim adodb, mantis, moodle +2 more +4 moreDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4...CVE-2006-0147Public exploitFix availableEPSS 13.1%7.5 HighJanuary 9, 2006
john lim adodb, mantis, mediabeez +3 more +5 moreThe server.php test script in ADOdb for PHP before 4.70, as used in multiple products including ...CVE-2006-0146Public exploitFix availableEPSS 13.2%7.5 HighJanuary 9, 2006
moodlejumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump...CVE-2005-3649Public exploit2.6 LowNovember 17, 2005
moodleMultiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2...CVE-2005-36487.5 HighNovember 17, 2005
moodleMultiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.CVE-2005-224710.0 HighJuly 12, 2005
moodleUnknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to ...CVE-2004-223710.0 HighDecember 31, 2004
moodleUnknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to...CVE-2004-223610.0 HighDecember 31, 2004
moodleUnknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to...CVE-2004-223510.0 HighDecember 31, 2004
moodleUnknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact...CVE-2004-223310.0 HighDecember 31, 2004
moodleSQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows...CVE-2004-22327.5 HighDecember 31, 2004
moodleDirectory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers...CVE-2004-14255.0 MediumDecember 31, 2004
moodleCross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote...CVE-2004-14244.3 MediumDecember 31, 2004
moodleCross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers...CVE-2004-17114.3 MediumAugust 6, 2004
moodleCross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote...CVE-2004-0725Public exploit6.8 MediumJuly 23, 2004
moodleCross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers...CVE-2004-1978Public exploit4.3 MediumApril 30, 2004