Skip to contentMoodle vulnerabilities
Newest
- moodle, yahoo yui +1 moreYUI Cross-site Scripting (XSS) vulnerabilityCVE-2013-4940Fix available4.3 Medium
- moodle, yahoo yui +1 moreCross-Site Scripting in yuiCVE-2013-4939Fix available4.3 Medium
- moodleThe LTI (aka IMS-LTI) mod_form implementation in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3...CVE-2013-49384.3 Medium
- moodlemod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x...CVE-2013-22464.0 Medium
- moodlerss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4...CVE-2013-22454.0 Medium
- moodleMultiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x...CVE-2013-22444.3 Medium
- moodlemod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4...CVE-2013-22434.0 Medium
- moodlemod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8,...CVE-2013-22424.0 Medium
- moodleMoodle is vulnerable to Improper Input Validation in MoodleQuickForm classCVE-2013-2083Fix available5.0 Medium
- moodleMoodle does not enforce capability requirements for reading blog commentsCVE-2013-2082Fix available5.0 Medium
- moodleMoodle does not consider "don't send" attributes during hub registrationCVE-2013-2081Fix available4.3 Medium
- moodleMoodle is vulnerable to Sensitive Information DisclosureCVE-2013-2080Fix available4.0 Medium
- moodlemod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2...CVE-2013-20794.0 Medium
- moodlecalendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability...CVE-2013-18294.0 Medium
- moodleMoodle does not properly manage privileges for WebDAV repositoriesCVE-2013-1836Fix available6.5 Medium
- moodleMoodle's login_as feature leaks information from external repositoriesCVE-2013-1835Fix available3.5 Low
- moodleMoodle allows remote authenticated users to reassign notesCVE-2013-1834Fix available4.0 Medium
- moodleMoodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker moduleCVE-2013-1833Fix available3.5 Low
- moodleMoodle includes the WebDAV password in the configuration formCVE-2013-1832Fix available4.0 Medium
- moodleMoodle reveals absolute path in exception messageCVE-2013-1831Fix available5.0 Medium
- moodle, fedoraproject fedora +1 moreMoodle does not enforce the forceloginforprofiles settingCVE-2013-1830Fix available5.0 Medium
- moodle, tinymce spellchecker php +1 morePHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requestsCVE-2012-6112Fix available5.0 Medium
- moodlecalendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x...CVE-2012-61065.5 Medium
- moodleblog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x...CVE-2012-61055.0 Medium
- moodleblog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows...CVE-2012-61045.0 Medium
- moodleMultiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the...CVE-2012-61036.8 Medium
- moodlelib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4...CVE-2012-61026.4 Medium
- moodleMultiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4...CVE-2012-61015.8 Medium
- moodlereport/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1...CVE-2012-61004.0 Medium
- moodleMoodle Arbitrary File Read via Backup FunctionalityCVE-2012-6099Fix available4.0 Medium
- moodlegrade/edit/outcome/edit_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x...CVE-2012-60984.0 Medium
- moodleMoodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage...CVE-2012-54814.0 Medium
- moodleThe Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2...CVE-2012-54806.4 Medium
- moodleThe Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3...CVE-2012-54796.5 Medium
- moodleThe Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2...CVE-2012-54734.0 Medium
- moodlelib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated...CVE-2012-54724.0 Medium
- moodleMoodle Allows Unauthenticated Dropbox AccessCVE-2012-5471Fix available6.5 Medium
- moodlecourse/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks...CVE-2012-44085.5 Medium
- moodlelib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not...CVE-2012-44075.0 Medium
- moodletheme/yui_combo.php in Moodle 2.3.x before 2.3.2 does not properly construct error responses for...CVE-2012-44035.0 Medium
- moodlewebservice/lib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does...CVE-2012-44024.9 Medium
- moodleMoodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass...CVE-2012-44014.0 Medium
- moodlerepository/repository_ajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote...CVE-2012-44004.0 Medium
- moodleAlgorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x...CVE-2012-33984.0 Medium
- moodlelib/modinfolib.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3...CVE-2012-33974.0 Medium
- moodleCross-site scripting (XSS) vulnerability in cohort/edit_form.php in Moodle 2.0.x before 2.0.10, 2...CVE-2012-33963.5 Low
- moodleSQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x...CVE-2012-33956.5 Medium
- moodleauth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2...CVE-2012-33945.0 Medium
- moodleCross-site scripting (XSS) vulnerability in repository/lib.php in Moodle 2.1.x before 2.1.7 and 2...CVE-2012-33933.5 Low
- moodlemod/forum/unsubscribeall.php in Moodle 2.1.x before 2.1.7 and 2.2.x before 2.2.4 does not...CVE-2012-33925.5 Medium
- Show moreLoading…