Cross site scripting

Cross-site scripting XSS vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name aka page title...

CVE-2008-5432

Cross-site scripting XSS vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name aka page title...

CVE-2008-5432

CVE-2008-5432 is an XSS vulnerability in Moodle that allows remote attackers to inject arbitrary web script or HTML via a Wiki page name. Affected Moodle versions include prior to 1.6.8, 1.7 prior to 1.7.6, 1.8 prior to 1.8.7, and 1.9 prior to 1.9.3. The connected documents confirm the vulnerabil...

CVE-2008-5432

Cross-site scripting XSS vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name aka page title...

CVE-2008-5432

Cross-site scripting XSS vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name aka page title...

[SECURITY] Fedora 10 Update: moodle-1.9.3-3.fc10

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

CVE-2008-5153

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/spell-check-debug.log, 2 /tmp/spell-check-before, or 3 /tmp/spell-check-after temporary file...

CVE-2008-5153

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/spell-check-debug.log, 2 /tmp/spell-check-before, or 3 /tmp/spell-check-after temporary file...

CVE-2008-5153

CVE-2008-5153 affects Moodle: local attackers could exploit a symlink-based race to overwrite arbitrary files via temporary files /tmp/spell-check-debug.log, /tmp/spell-check-before, or /tmp/spell-check-after. Initial description identifies Moodle 1.8.2 as vulnerable with a local symlink attack. ...

CVE-2008-5153

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/spell-check-debug.log, 2 /tmp/spell-check-before, or 3 /tmp/spell-check-after temporary file...

Fedora 9 : moodle-1.9.3-3.fc9 (2008-9508)

Fix for cron job, also fix for CVE-2008-4796. Upgrade to new upstream, fix cron bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 8 : moodle-1.8.7-1.fc8 (2008-9502)

Fix for cron job, also fix for CVE-2008-4796. Upgrade to new upstream, fix cron bug. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

[SECURITY] Fedora 9 Update: moodle-1.9.3-3.fc9

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 8 Update: moodle-1.8.7-1.fc8

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

CVE-2008-4811

The expandquotedtext function in libs/SmartyCompiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote attackers to execute arbitrary PHP code via vectors related to templates and a \ backslash before a dollar-sign character...

USN-658-1: Moodle vulnerability

Lukasz Pilorz discovered that the HTML filtering used in Moodle was not strict enough. A remote attacker could send malicious requests to Moodle and execute arbitrary code as the web server user...

OLIB 7 WebView 2.5.1.1 (infile) Local File Inclusion Vulnerability

No description provided by source. Security Advisory for 'OLIB 7 Webview' This software is apart of Moodle. Software - OLIB 7 WebView v2.5.1.1 Exploit - LFI Severity - High Author - ZeN website - http://dusecurity.com/ Date - 2nd October 2008 DUSecurity Team / DarkCode Exploit...

OLIB 7 WebView 2.5.1.1 - 'infile' Local File Inclusion

Security Advisory for 'OLIB 7 Webview' This software is apart of Moodle. Software - OLIB 7 WebView v2.5.1.1 Exploit - LFI Severity - High Author - ZeN website - http://dusecurity.com/ Date - 2nd October 2008 DUSecurity Team / DarkCode Exploit http://olib.site.com/cgi/?session=sessionkey&infile=LF...

olibwebview-lfi.txt

Security Advisory for 'OLIB 7 Webview' This software is apart of Moodle. Software - OLIB 7 WebView v2.5.1.1 Exploit - LFI Severity - High Author - ZeN website - http://dusecurity.com/ Date - 2nd October 2008 DUSecurity Team / DarkCode Exploit http://olib.site.com/cgi/?session=sessionkey&infile=LF...

OLIB 7 WebView 2.5.1.1 - infile Local File Inclusion

OLIB 7 WebView 2.5.1.1 - infile Local File Inclusion Security Advisory for 'OLIB 7 Webview' This software is apart of Moodle. Software - OLIB 7 WebView v2.5.1.1 Exploit - LFI Severity - High Author - ZeN website - http://dusecurity.com/ Date - 2nd October 2008 DUSecurity Team / DarkCode Exploit...