Lucene search
RedhatCVELIST:CVE-2016-0725HistoryFeb 22, 2016 - 2:00 a.m.
CVE-2016-0725
2016-02-2202:00:00
redhat
www.cve.org
7
EPSS
0.002
Percentile
59.5%
Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552
lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html
www.openwall.com/lists/oss-security/2016/01/18/1
www.securitytracker.com/id/1034694
moodle.org/mod/forum/discuss.php?d=326206
Related
github
github
Moodle Cross-site scripting (XSS) vulnerability in course management search
2022-05-13 01:12:38
prion
prion
Cross site scripting
2016-02-22 05:59:00
osv
osv
Moodle Cross-site scripting (XSS) vulnerability in course management search
2022-05-13 01:12:38
nvd
nvd
CVE-2016-0725
2016-02-22 05:59:22
veracode
veracode
Cross-Site Scripting (XSS)
2017-07-26 06:27:01
ubuntucve
ubuntucve
CVE-2016-0725
2016-02-22 00:00:00
cve
cve
CVE-2016-0725
2016-02-22 05:59:22
openvas
openvas
Fedora Update for moodle FEDORA-2016-1
2016-02-05 00:00:00
Mageia: Security Advisory (MGASA-2016-0029)
2016-01-21 00:00:00
nessus
nessus
FreeBSD : moodle -- multiple vulnerabilities (2d299950-ddb0-11e5-8fa8-14dae9d210b8)
2016-02-29 00:00:00
Fedora 23 : moodle-2.9.4-1.fc23 (2016-1c10ab3c35)
2016-03-04 00:00:00
Fedora 22 : moodle-2.8.10-1.fc22 (2016-fb2597f4eb)
2016-03-04 00:00:00
mageia
mageia
Updated moodle packages fix security vulnerability
2016-01-20 20:53:26
freebsd
freebsd
moodle -- multiple vulnerabilities
2016-01-18 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: moodle-2.8.10-1.fc22
2016-02-01 06:35:55
[SECURITY] Fedora 23 Update: moodle-2.9.4-1.fc23
2016-01-30 18:28:59