CVE-2010-1614

Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...

CVE-2010-1617

CVE-2010-1617 (Moodle) : A flaw in Moodle’s access check on user/view.php allows remote authenticated users to obtain the full names of other users via the course profile page. Affected: Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8. Exploitation context and impact are stated in multiple advi...

CVE-2010-1614

CVE-2010-1614 affects Moodle 1.8.x < 1.8.12 and 1.9.x

CVE-2010-1619

CVE-2010-1619 affects Moodle’s KSES HTML text cleaning library (weblib.php) via the fix_non_standard_entities function. The vulnerability allows remote XSS by crafting HTML entities and is reported in Moodle 1.8.x prior to 1.8.12 and 1.9.x prior to 1.9.8. Related advisories describe multiple link...

CVE-2010-1618

The CVE-2010-1618 issue is a Cross-site Scripting (XSS) vulnerability in the phpCAS client library (pre-1.1.0) used by Moodle 1.8.x and 1.9.x series, where a crafted URL can inject script/HTML due to improper handling in an error message. Affected stack examples include Moodle 1.8.x before 1.8.12...

CVE-2010-1613

Moodle 1.8.x and 1.9.x before 1.9.8 are affected. The root cause is that the Regenerate session id during login setting is not enabled by default, enabling potential session fixation by remote attackers. Debian/SUSE advisories confirm remediation by upgrading Moodle to fixed packages (e.g., Debia...

CVE-2010-1615

Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to 1 the addtolog function in mod/wiki/view.php in the wiki module, or 2 "data validation in some forms elements" related to...

CVE-2010-1616

CVE-2010-1616 affects Moodle 1.8.x and 1.9.x up to 1.9.7/1.9.8, where restoring a course can create new roles, enabling teachers to create new accounts without moodle/user:create capability. Root cause: role creation during course restore. Impact: potential unauthorized account creation by teache...

CVE-2010-1616

Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability...

CVE-2010-1617

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page...

CVE-2010-1619

Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...

CVE-2010-1613

Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks...

FreeBSD : moodle -- multiple vulnerabilities (f6429c24-4fc9-11df-83fb-0015587e2cc1)

The Moodle release notes report multiple vulnerabilities which could allow remote attackers to perform, amongst others, cross site scripting, user enumeration and SQL injection attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Moodle Prior to 1.9.8/1.8.12 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities, including: - multiple cross-site scripting issues - a security-bypass issue - an information-disclosure issue - multiple SQL-injection issues - an HTML-injection issue - a session-fixation issue Attackers can exploit these issues to bypass certain...

Moodle 1.8.x < 1.8.12, 1.9.x < 1.9.8 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Moodle < 1.8.12 / 1.9.x < 1.9.8 Multiple Vulnerabilities

Binary data 5504.prm...

[SECURITY] Fedora 13 Update: moodle-1.9.8-1.fc13

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Fedora Update for moodle FEDORA-2010-5356

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2010-5356 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for moodle FEDORA-2010-5370

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for moodle FEDORA-2010-5370

Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2010-5370 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...