| Reporter | Title | Published | Views | Family All 20 |
|---|---|---|---|---|
| moodle -- multiple vulnerabilities | 18 Jan 201600:00 | – | freebsd | |
| Moodle Security Bypass Vulnerability (CNVD-2016-00395) | 20 Jan 201600:00 | – | cnvd | |
| CVE-2016-0724 | 22 Feb 201602:00 | – | cvelist | |
| EUVD-2022-4171 | 3 Oct 202520:07 | – | euvd | |
| [SECURITY] Fedora 23 Update: moodle-2.9.4-1.fc23 | 30 Jan 201618:28 | – | fedora | |
| [SECURITY] Fedora 22 Update: moodle-2.8.10-1.fc22 | 1 Feb 201606:35 | – | fedora | |
| Fedora 23 : moodle-2.9.4-1.fc23 (2016-1c10ab3c35) | 4 Mar 201600:00 | – | nessus | |
| Fedora 22 : moodle-2.8.10-1.fc22 (2016-fb2597f4eb) | 4 Mar 201600:00 | – | nessus | |
| FreeBSD : moodle -- multiple vulnerabilities (2d299950-ddb0-11e5-8fa8-14dae9d210b8) | 29 Feb 201600:00 | – | nessus | |
| Moodle sensitive information disclosure | 13 May 202201:12 | – | github |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| wsfunction | query param | /webservice/rest/server.php?wsfunction=core_enrol_get_course_enrolment_methods | Web service call core_enrol_get_course_enrolment_methods can leak sensitive information when moodle/course:viewhiddencourses capability is not enforced. | CWE-264, CWE-200 |
| wsfunction | query param | /webservice/rest/server.php?wsfunction=enrol_self_get_instance_info | Web service call enrol_self_get_instance_info can leak sensitive information when moodle/course:viewhiddencourses capability is not enforced. | CWE-264, CWE-200 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation