openSUSE Security Update : moodle (moodle-672)

moodle was prone to several cross-site-scripting XSS and cross-site-request-forgery CSRF problems CVE-2009-0499, CVE-2009-0500, CVE-2009-0501, CVE-2009-0502. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE Security Update : moodle (moodle-127)

Moodle was prone to a Cross-Site scripting flaw which could potentially be exploited to compromise arbitrary accounts CVE-2008-3326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-127...

openSUSE Security Update : moodle (moodle-445)

Insufficient quoting of wiki page titles allowed attackers to conduct cross site scripting XSS attacks CVE-2008-5432 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-445. The text...

Ubuntu USN-791-1 (moodle)

The remote host is missing an update to moodle announced via advisory USN-791-1. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: ubuntu7911.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7911.nasl 7969 2017-12-01 09:23:16Z santu $ Description:...

Ubuntu USN-791-2 (moodle)

The remote host is missing an update to moodle announced via advisory USN-791-2. OpenVAS Vulnerability Test $Id: ubuntu7912.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu7912.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-791-2 moodle Authors: Thoma...

Ubuntu: Security Advisory (USN-791-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-791-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.04 : moodle vulnerability (USN-791-2)

Christian Eibl discovered that the TeX filter in Moodle allowed any function to be used. An authenticated remote attacker could post a specially crafted TeX formula to execute arbitrary TeX functions, potentially reading any file accessible to the web server user, leading to a loss of privacy...

USN-791-2: Moodle vulnerability

Christian Eibl discovered that the TeX filter in Moodle allowed any function to be used. An authenticated remote attacker could post a specially crafted TeX formula to execute arbitrary TeX functions, potentially reading any file accessible to the web server user, leading to a loss of privacy...

USN-791-1: Moodle vulnerabilities

Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...

Fedora 10 : moodle-1.9.3-3.fc10 (2008-9903)

Fix for cron job, also fix for CVE-2008-4796. Upgrade to new upstream, fix cron bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Ubuntu 7.10 / 8.04 LTS : moodle vulnerability (USN-658-1)

Lukasz Pilorz discovered that the HTML filtering used in Moodle was not strict enough. A remote attacker could send malicious requests to Moodle and execute arbitrary code as the web server user. Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 10 : moodle-1.9.3-4.fc10 (2008-11550)

Fix for RCE vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...

Fedora 10 : moodle-1.9.4-1.fc10 (2009-1699)

Multiple security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 10 : moodle-1.9.4-6.fc10 (2009-3280)

CVE-2009-1171: The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a '$$' sequence, which causes LaTeX to include the contents of the file. Upstream bug and CVS commit:...

Fedora 10 : moodle-1.9.3-5.fc10 (2009-0819)

Fix for spellcheck security flaw, and some font correction. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

openSUSE 10 Security Update : moodle (moodle-6198)

Special command sequences in TeX files allowed users to read arbitrary files CVE-2009-1171. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-6198. The text description of this plugin is ...

Debian Security Advisory DSA 1761-1 (moodle)

The remote host is missing an update to moodle announced via advisory DSA 1761-1. OpenVAS Vulnerability Test $Id: deb17611.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1761-1 moodle Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Fedora Core 10 FEDORA-2009-3280 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-3280. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-3283 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-3283. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...