CVE-2009-1502

creationtimestamp| type| source ---|---|--- 2009-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8566...

Ubuntu 7.10 / 8.04 LTS : moodle vulnerability (USN-658-1)

Lukasz Pilorz discovered that the HTML filtering used in Moodle was not strict enough. A remote attacker could send malicious requests to Moodle and execute arbitrary code as the web server user. Note that Tenable Network Security has extracted the preceding description block directly from the...

Ubuntu Update for moodle vulnerability USN-658-1

Ubuntu Update for Linux kernel vulnerabilities USN-658-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6581.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for moodle vulnerability USN-658-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Debian Security Advisory DSA 1691-1 (moodle)

The remote host is missing an update to moodle announced via advisory DSA 1691-1. OpenVAS Vulnerability Test $Id: deb16911.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1691-1 moodle Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[SECURITY] [DSA 1691-1] New moodle packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1691-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 22, 2008 http://www.debian.org/security/faq -...

Gentoo Security Advisory GLSA 200805-04 (egroupware)

The remote host is missing updates announced in advisory GLSA 200805-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-04 (egroupware)

The remote host is missing updates announced in advisory GLSA 200805-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mplayer -- Multiple integer overflows

The remote host is missing an update to the system as announced in the referenced advisory. VID c7526a14-c4dc-11da-9699-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

openSUSE 10 Security Update : moodle (moodle-5439)

An incorrect input validation in moodle could be exploited by attackers to conduct cross site scripting attacks CVE-2008-1502. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-5439. The...

[ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200805-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

DSquare Exploit Pack: D2SEC_MOODLE_REXEC

Name| d2secmoodlerexec ---|--- CVE| CVE-2008-1502 Exploit Pack| D2ExploitPack Description| d2secmoodlerexec Notes|...

CVE-2008-1502

The badprotocolonce function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting XSS attacks via a string containing crafted URL protocols...

CVE-2008-1502

The CVE-2008-1502 issue concerns the _bad_protocol_once function in KSES (phpgwapi/inc/class.kses.inc.php). In affected products (notably Moodle < 1.8.5 and eGroupWare

CVE-2003-1502

CVE-2003-1502 affects mod_throttle 3.0. Local users with Apache privileges can access shared memory that points to a file writable by the Apache user, which could allow privilege escalation. The Red Hat advisory confirms the issue; no exploitation status or workaround is provided in the available...

CVE-2007-1502

CVE-2007-1502 affects Rhapsody IRC 0.28b; multiple buffer overflow paths allow remote code execution via long arguments across commands (connect, server, nick, ctcp/chat/notice/msg, query). The connected sources corroborate a set of six or more long-argument vectors (1) command, (2) server argume...

CVE-2006-1502

CVE-2006-1502 : The vulnerability affects MPlayer (including mplayer-bin) where multiple integer overflows occur in ASF and AVI handling. The asf_descrambling path can receive a negative int after char-to-int conversion in asfheader.c, and the indx chunk in AVI handling can be crafted via wLongsP...

CVE-2001-1502

The OpenVAS entries confirm CVE-2001-1502 affects Mountain Network Systems WebCart 8.4, where the webcart.cgi CGI script does not properly filter user input and allows remote command execution via shell metacharacters in the NEXTPAGE parameter. Impact is arbitrary command execution on the affecte...

CVE-2005-1502

The CVE-2005-1502 entry describes a cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart. The affected components are the search_list.php script (parameter: searchstring) and item_list.php (parameters: secondgroup, maingroup). The core issue is the ability for remote attackers t...

CVE-2004-1502

The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service socket exhaustion via a Telnet request to an IP address of the proxy's network interface, which causes a loop...

CVE-2004-1502

CVE-2004-1502 refers to the Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier. The issue allows remote attackers to cause a denial of service (socket exhaustion) by sending a Telnet request to an IP address of the proxy’s network interface, which triggers a loop. The available sources do n...