Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Updated moodle packages fix security vulnerabilities

🗓️ 23 Sep 2015 19:42:52Reported by Gentoo FoundationType 
mageia
 mageia🔗 advisories.mageia.org👁 37 Views

Updated moodle packages fix security vulnerabilities. In Moodle before 2.8.8, completed and graded lesson activity was not protected against making new attempts to answer some questions. Users could delete files uploaded by other users in wiki. Meta course synchronisation enrols suspended students as managers for a short period of time and causes large database growth. Password recovery tokens can be guessed because of php randomisation limitations. Capability to manage groups does not have XSS risk, however it was possible to add XSS to the grouping description

Related
Packages
Refs
ReporterTitlePublishedViews
Family
Tenable Nessus		Moodle 2.7.x < 2.7.10 / 2.8.x < 2.8.8 / 2.9.x < 2.9.2 Multiple Vulnerabilities
7 Oct 201500:00
–nessus
Tenable Nessus		Fedora 22 : moodle-2.8.9-1.fc22 (2015-2ebdd4ad8f)
4 Mar 201600:00
–nessus
Tenable Nessus		Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)
4 Mar 201600:00
–nessus
Tenable Nessus		FreeBSD : moodle -- multiple vulnerabilities (c2fcbec2-5daa-11e5-9909-002590263bf5)
18 Sep 201500:00
–nessus
BDU FSTEC		The vulnerability of the Moodle learning management system allows a hacker to bypass existing access restrictions.
17 Mar 201600:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Moodle learning management system allows a hacker to delete any files they desire.
17 Mar 201600:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Moodle learning management system allows a hacker to escalate their privileges.
17 Mar 201600:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Moodle learning management system allows a hacker to obtain the user’s password.
17 Mar 201600:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Moodle learning management system allows a hacker to obtain confidential information.
17 Mar 201600:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary Web or HTML code.
17 Mar 201600:00
–bdu_fstec
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Mageia5anymoodle2.8.8-1moodle-2.8.8-1.noarch.rpm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Sep 2015 19:42Current
6.4Medium risk
Vulners AI Score6.4
CVSS 37.5
CVSS 25.5
EPSS0.00401
moodlesecurity vulnerabilitiesupdated packageslesson activitywikimeta coursedatabase growthpassword recoveryrandomization limitationsgroup accessxss risk
37