UBUNTU-CVE-2015-1321

Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted webpage...

CVE-2015-1321

Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted webpage...

CVE-2013-1833

Multiple cross-site scripting XSS vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename...

CVE-2013-1833

Multiple cross-site scripting XSS vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename...

CVE-2013-1833

CVE-2013-1833 affects Moodle’s File Picker module across Moodle 2.x: vulnerable in 2.1.x up to 2.1.10; 2.2.x prior to 2.2.8; 2.3.x prior to 2.3.5; and 2.4.x prior to 2.4.2. Root cause is cross-site scripting via crafted filenames, exploitable by remote authenticated users. Impact is XSS in authen...

CVE-2013-1833: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename...

UBUNTU-CVE-2013-1833

Multiple cross-site scripting XSS vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename...

Design/Logic Flaw

The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout...

CVE-2012-5471

The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout...

CVE-2012-5471

The vulnerability CVE-2012-5471 affects Moodle’s Dropbox Repository File Picker in Moodle 2.1.x (before 2.1.9), 2.2.x (before 2.2.6), and 2.3.x (before 2.3.3). It allows remote authenticated users to access another user’s Dropbox by using an unattended workstation after logout. The issue is addre...

CVE-2012-5471: Undefined Security Weakness

The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout...