Fedora 8 : moodle-1.8.4-1.fc8 (2008-0610)

Upgrade to 1.8.4, fix CVE-2008-0123. Added Tamil Sri Lanka support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2008-0123

CVE-2008-0123 is an XSS vulnerability in Moodle 1.8.3 (and possibly earlier than 1.8.4) where the dbname parameter during installation can be exploited to inject arbitrary scripts/HTML. Exploitation details are not provided in the sources; no explicit patch/version fix is detailed. Fedora/OpenVAS...

CVE-2008-0123

Cross-site scripting XSS vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete...

moodleinstall-xss.txt

Source URL of this announcement: http://int21.de/cve/CVE-2008-0123-moodle.html References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0123 Description Moodle is a course management system for educators. The installer code is vulnerable to Cross Site Scripting, letting you inject...

[Full-disclosure] Cross site scripting (XSS) in Moodle 1.8.3

Source URL of this announcement: http://int21.de/cve/CVE-2008-0123-moodle.html References https://vulners.com/cve/CVE-2008-0123 Description Moodle is a course management system for educators. The installer code is vulnerable to Cross Site Scripting, letting you inject JavaScript and steal cookies...

CVE-2006-0123

CVE-2006-0123 involves multiple SQL injection vulnerabilities in ADN Forum 1.0b. The affected component is the forum software, with the vulnerable entry points identified as the fid parameter in index.php and the pagid parameter in verpag.php (and possibly other vectors). The root cause is unsafe...

CVE-2003-0123

CVE-2003-0123 concerns a buffer overflow in Lotus Notes/Domino Web Retriever (R4.5–R6). A remote attacker sending an overly long HTTP status line can crash the Web Retriever, causing a denial of service on the server or client depending on the setup. Public sources from Rapid7 (R7-0011) detail af...

CVE-2004-0123

Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-0123

Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-0123

CVE-2004-0123 (ASN.1 “Double Free”) affects Windows platforms including NT 4.0, Windows 2000, Windows XP, and Windows Server 2003. The issue is a potential memory-management error caused by a possible double-free condition in the Microsoft ASN.1 Library, which could lead to memory corruption and,...

CVE-2002-0123

MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request...

CVE-2002-0123

The affected product is MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier (and possibly 3.5.3). The vulnerability arises from handling of an excessively long HTTP request, which can be leveraged by a remote attacker to cause a denial of service and potentially execute arbitrary c...

CVE-2003-0123

Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service crash via a long HTTP status line...

CVE-2002-0123

MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request...

CVE-2001-0123

Technical details for CVE-2001-0123 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2001-0123

Directory traversal vulnerability in eXtropia bbsforum.cgi 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack on the file parameter...

CVE-2001-0123

Directory traversal vulnerability in eXtropia bbsforum.cgi 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack on the file parameter...

CVE-2000-0123

CVE-2000-0123 describes a vulnerability in the Filemaker shopping cart application where remote attackers can alter sensitive purchase information by manipulating hidden form fields. The available sources confirm the issue exists in the shopping cart component shipped with Filemaker, enabling inf...

CVE-2000-0123

The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields...

CVE-1999-0123

CVE-1999-0123 describes a race condition in the Linux mailx command that allows local users to read user files. The consensus across connected records confirms impact is local escalation via the mailx utility; specific affected versions, root cause details, and exact remediation are not consisten...