Skip to contentMoodle vulnerabilities
Newest
- moodlemod/forum/rsslib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly...CVE-2012-33914.0 Medium
- moodlelib/filelib.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not properly restrict...CVE-2012-33903.5 Low
- moodleMultiple cross-site scripting (XSS) vulnerabilities in mod/lti/typessettings.php in Moodle 2.2.x...CVE-2012-33894.3 Medium
- moodleThe is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1...CVE-2012-33884.0 Medium
- moodleMoodle Authentication Bypass in File UploadCVE-2012-3387Fix available4.0 Medium
- moodleMoodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows...CVE-2012-23674.0 Medium
- moodlemod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate...CVE-2012-23665.5 Medium
- moodleCross-site scripting (XSS) vulnerability in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2...CVE-2012-23653.5 Low
- moodleCross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x...CVE-2012-23643.5 Low
- moodleSQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x...CVE-2012-23636.5 Medium
- moodleCross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9...CVE-2012-23622.6 Low
- moodleCross-site scripting (XSS) vulnerability in admin/webservice/forms.php in the web services...CVE-2012-23613.5 Low
- moodleCross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1...CVE-2012-23603.5 Low
- moodleadmin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3...CVE-2012-23596.5 Medium
- moodleMoodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated...CVE-2012-23585.5 Medium
- moodleThe Multi-Authentication feature in the Central Authentication Service (CAS) functionality in...CVE-2012-23575.0 Medium
- moodleMoodle Authentication Bypass in Question-BankCVE-2012-2356Fix available4.0 Medium
- moodleMoodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass...CVE-2012-23554.0 Medium
- moodleMoodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the...CVE-2012-23544.0 Medium
- moodleMoodle Exposes Sensitive User InformationCVE-2012-2353Fix available4.0 Medium
- moodleMoodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle...CVE-2011-45934.0 Medium
- moodleThe command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not...CVE-2011-45925.0 Medium
- moodleCross-site scripting (XSS) vulnerability in the print_object function in lib/datalib.php in...CVE-2011-45914.3 Medium
- moodleThe web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not...CVE-2011-45904.0 Medium
- moodlebackup/moodle2/restore_stepslib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not...CVE-2011-45895.5 Medium
- moodleMoodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1)...CVE-2011-45836.5 Medium
- moodleMoodle Open Redirect in Calendar Set PageCVE-2011-4582Fix available4.9 Medium
- moodlemod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote...CVE-2011-45814.0 Medium
- moodlelib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle...CVE-2012-08017.5 High
- moodleThe form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x...CVE-2012-08002.1 Low
- moodleMoodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled,...CVE-2012-07994.3 Medium
- moodleThe self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows...CVE-2012-07985.5 Medium
- moodleMoodle Users Can Bypass Deleted StatusCVE-2012-0797Fix available5.5 Medium
- moodleMoodle does not properly restrict comment capabilitiesCVE-2011-4297Fix available6.4 Medium
- moodlelib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect...CVE-2011-42965.5 Medium
- moodleThe moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2...CVE-2011-42956.5 Medium
- moodleMoodle Double-Caches Content, Potentially Writing to a File System's Tmp DirectoryCVE-2011-4293Fix available6.4 Medium
- moodleMoodle allows remote authenticated users to cause a denial of service (invalid database records)CVE-2011-4292Fix available4.0 Medium
- moodleMoodle allows remote authenticated users to cause a denial of service (invalid database records)CVE-2011-4291Fix available4.0 Medium
- moodleMoodle does not recogniz configuration setting that makes e-mail addresses visible only to course membersCVE-2011-4289Fix available4.0 Medium
- moodleMoodle does not force password changes for autosubscribed usersCVE-2011-4287Fix available6.8 Medium
- moodleMoodle Incorrect Default SettingsCVE-2011-4285Fix available5.5 Medium
- moodleMoodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context pageCVE-2011-4284Fix available5.0 Medium
- moodleMoodle vulnerable to Cross-site ScriptingCVE-2011-4282Fix available4.3 Medium
- moodleMoodle vulnerable to Cross-Site Request ForgeryCVE-2011-4281Fix available6.8 Medium
- moodle, nimish pachapurkar spike phpcoverage +1 moreMoodle vulnerable to XSS via bundled spikephpcoverage libraryCVE-2011-4280Public exploitFix available4.3 Medium
- moodleMoodle does not use the forceloginforprofiles setting for course-profiles access controlCVE-2011-4279Fix available5.0 Medium
- moodleMoodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended...CVE-2011-43095.0 Medium
- moodleCross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0...CVE-2011-43074.3 Medium
- moodleThe chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote...CVE-2011-43044.0 Medium
- Show moreLoading…