Skip to contentMoodle vulnerabilities
Newest
- moodlelib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct...CVE-2011-43034.3 Medium
- moodleMoodle does not properly restrict access to category and course dataCVE-2011-4300Fix available5.0 Medium
- moodleMoodle vulnerable to Cross-Site ScriptingCVE-2011-4299Fix available4.3 Medium
- moodleMoodle vulnerable to Cross-Site Request ForgeryCVE-2011-4298Fix available6.8 Medium
- moodlePHPMailer vulnerable to email header injectionCVE-2012-0796Fix available4.0 Medium
- moodleMoodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does...CVE-2012-07956.5 Medium
- moodleThe rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2...CVE-2012-07945.0 Medium
- moodleMoodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows...CVE-2012-07935.0 Medium
- moodlemod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the...CVE-2012-07924.0 Medium
- moodleThe ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect...CVE-2011-45885.0 Medium
- moodlelib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does...CVE-2011-45876.8 Medium
- moodleCRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before...CVE-2011-45865.0 Medium
- moodlelogin/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change...CVE-2011-45855.0 Medium
- moodleThe MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1...CVE-2011-45844.0 Medium
- moodlemod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2...CVE-2011-43084.0 Medium
- moodleMoodle CRLF Injection Vulnerability in Calendar ComponentCVE-2011-4203Fix available5.0 Medium
- moodleMoodle XSS VulnerabilityCVE-2011-4306Fix available4.3 Medium
- moodlemessage/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a...CVE-2011-43054.0 Medium
- moodlemnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x...CVE-2011-43026.8 Medium
- moodleMoodle Allows Modification of ConstantsCVE-2011-4301Fix available5.0 Medium
- moodleMoodle Open Redirect Via Error MessagesCVE-2011-4294Fix available5.8 Medium
- moodleMoodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a ...CVE-2011-37575.0 Medium
- moodleMultiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9...CVE-2011-42904.3 Medium
- moodleMoodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations...CVE-2011-42884.0 Medium
- moodleMoodle vulnerable to Cross-site ScriptingCVE-2011-4286Fix available4.3 Medium
- moodleMoodle allows remote attackers to obtain sensitive informationCVE-2011-4283Fix available5.0 Medium
- moodleMoodle XSS In Tag Autocomplete functionalityCVE-2011-4278Fix available4.3 Medium
- moodleMoodle vulnerable to Cross-Site Request ForgeryCVE-2011-4133Fix available6.8 Medium
- moodleCross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module...CVE-2010-22316.8 Medium
- moodleMoodle Cross-site Scripting vulnerability in the KSES text cleaning filterCVE-2010-2230Fix available4.0 Medium
- moodleMultiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle before 1.8.13 and...CVE-2010-22294.3 Medium
- moodleCross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1...CVE-2010-22284.3 Medium
- moodleMoodle vulnerable to Cross-site ScriptingCVE-2010-1619Fix available4.3 Medium
- ja-sig phpcas client library, moodle +1 morephpCAS client library and Moodle Cross-site Scripting vulnerabilityCVE-2010-1618Fix available4.3 Medium
- moodleMoodle doesn't properly check roleCVE-2010-1617Fix available4.0 Medium
- moodleMoodle is vulnerable to unauthorized new accounts creationCVE-2010-1616Fix available4.0 Medium
- moodleMoodle vulnerable to SQL injectionCVE-2010-1615Fix available7.5 High
- moodleMoodle vulnerable to Cross-site ScriptingCVE-2010-1614Fix available4.3 Medium
- moodleMoodle Session Fixation vulnerabilityCVE-2010-1613Fix available6.8 Medium
- moodleSQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7...CVE-2009-43056.5 Medium
- moodleMoodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not use a random password salt in config.php,...CVE-2009-43047.5 High
- moodleMoodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified ...CVE-2009-43035.0 Medium
- moodlelogin/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on...CVE-2009-43025.0 Medium
- moodlemnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled,...CVE-2009-43016.0 Medium
- moodleMultiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7...CVE-2009-43005.0 Medium
- moodlemod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9...CVE-2009-42995.0 Medium
- moodleThe LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1)...CVE-2009-42985.0 Medium
- moodleMultiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9...CVE-2009-42976.8 Medium
- moodleThe TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1...CVE-2009-1171Public exploitFix available4.3 Medium
- moodle, debian linux +1 moreUnspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1...CVE-2008-61256.5 Medium
- Show moreLoading…