Moodle

🛡 Vulnerabilities tagged with this 28

	ID	Title	Severity	Detected
	CVE-2017-15110	Information Disclosure in moodle (CVE-2017-15110)	Medium	8 years ago
	CVE-2017-12157	Information Disclosure in moodle (CVE-2017-12157)	Medium	8 years ago
	CVE-2017-12156	Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.	Medium	8 years ago
	CVE-2017-7532	In Moodle 3.x, course creators are able to change system default settings for courses.	Medium	8 years ago
	CVE-2017-7531	In Moodle 3.3, the course overview block reveals activities in hidden courses.	Medium	8 years ago
	CVE-2017-2642	Moodle 3.x has user fullname disclosure on the user preferences page.	Medium	8 years ago
	CVE-2017-7491	Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-7491)	Medium	8 years ago
	CVE-2017-7490	Vulnerability in moodle (CVE-2017-7490)	Medium	8 years ago
	CVE-2017-7489	Privilege Escalation in moodle (CVE-2017-7489)	Medium	8 years ago
	CVE-2016-3729	Vulnerability in moodle (CVE-2016-3729)	Medium	9 years ago
	CVE-2016-3734	Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-3734)	High	9 years ago
	CVE-2016-3733	Vulnerability in moodle (CVE-2016-3733)	Medium	9 years ago
	CVE-2016-3732	Information Disclosure in moodle (CVE-2016-3732)	Medium	9 years ago
	CVE-2016-3731	Information Disclosure in moodle (CVE-2016-3731)	Medium	9 years ago
	CVE-2017-7298	Cross-Site Scripting (XSS) in moodle (CVE-2017-7298)	Medium	9 years ago
	CVE-2017-2645	In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.	Medium	9 years ago
	CVE-2017-2644	In Moodle 3.x, XSS can occur via evidence of prior learning.	Medium	9 years ago
	CVE-2017-2643	In Moodle 3.2.x, global search displays user names for unauthenticated users.	Medium	9 years ago
	CVE-2017-2641	In Moodle 2.x and 3.x, SQL injection can occur via user preferences.	Critical	9 years ago
	CVE-2016-5012	In Moodle 3.x, glossary search displays entries without checking user permissions to view them.	Medium	9 years ago
	CVE-2017-2578	In Moodle 3.x, there is XSS in the assignment submission page.	Medium	9 years ago
	CVE-2017-2576	In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.	Medium	9 years ago
	CVE-2016-8644	In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.	Medium	9 years ago
	CVE-2016-8643	In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.	Medium	9 years ago
	CVE-2016-8642	In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.	Medium	9 years ago
	CVE-2016-7038	Vulnerability in moodle (CVE-2016-7038)	High	9 years ago
	CVE-2016-5014	Information Disclosure in moodle (CVE-2016-5014)	Medium	9 years ago
	CVE-2016-5013	Vulnerability in moodle (CVE-2016-5013)	Medium	9 years ago