Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.0Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated us…Check if you run itEPSS 1.67%Jul 16, 2012
- Medium4.0Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read…Check if you run itEPSS 1.67%Jul 16, 2012
- Medium6.8admin/uploaduser_form.php in Moodle 2.0.x before 2.0.3 does not force password changes for autosubscribed users, which makes it easier for remote attackers to obtain a…Check if you run itEPSS 2.07%Jul 16, 2012
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before…Check if you run itEPSS 1.83%Jul 16, 2012
- Medium5.5The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to dele…Check if you run itEPSS 1.91%Jul 16, 2012
- Medium5.0Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile (aka My profile) block by visiting a user-context page.Check if you run itEPSS 2.12%Jul 16, 2012
- Medium5.0Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive i…Check if you run itEPSS 2.12%Jul 16, 2012
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to…Check if you run itEPSS 1.83%Jul 16, 2012
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requ…Check if you run itEPSS 1.01%Jul 16, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remot…Check if you run itEPSS 3.62%Jul 16, 2012
- Medium5.0Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain poten…Check if you run itEPSS 1.40%Jul 16, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject a…Check if you run itEPSS 1.83%Jul 16, 2012
- Medium6.8Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests…Check if you run itEPSS 1.01%Jul 16, 2012
- Medium5.0Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest rol…Check if you run itEPSS 1.43%Jul 11, 2012
- Medium4.0mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via…Check if you run itEPSS 1.67%Jul 11, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary w…Check if you run itEPSS 1.19%Jul 11, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or H…Check if you run itEPSS 1.83%Jul 11, 2012
- Medium4.0message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zer…Check if you run itEPSS 1.92%Jul 11, 2012
- Medium4.0The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.Check if you run itEPSS 1.72%Jul 11, 2012
- Medium4.3lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote…Check if you run itEPSS 1.25%Jul 11, 2012
- Medium6.8mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_veri…Check if you run itEPSS 1.28%Jul 11, 2012
- Medium5.0The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms A…Check if you run itEPSS 2.10%Jul 11, 2012
- Medium5.0The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attac…Check if you run itEPSS 2.12%Jul 11, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitr…Check if you run itEPSS 1.19%Jul 11, 2012
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack…Check if you run itEPSS 1.01%Jul 11, 2012
Sort