Debian: Security Advisory (DSA-1030-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 7 : moodle-1.8.4-1.fc7 (2008-0627)

Upgrade to 1.8.4, fix CVE-2008-0123. Added Tamil Sri Lanka support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : moodle-1.8.4-1.fc8 (2008-0610)

Upgrade to 1.8.4, fix CVE-2008-0123. Added Tamil Sri Lanka support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 7 Update: moodle-1.8.4-1.fc7

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 8 Update: moodle-1.8.4-1.fc8

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

CVE-2008-0123

Cross-site scripting XSS vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete...

Cross site scripting

Cross-site scripting XSS vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete...

CVE-2008-0123

Cross-site scripting XSS vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete...

CVE-2008-0123

Cross-site scripting XSS vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete...

CVE-2008-0123

CVE-2008-0123 is an XSS vulnerability in Moodle 1.8.3 (and possibly earlier than 1.8.4) where the dbname parameter during installation can be exploited to inject arbitrary scripts/HTML. Exploitation details are not provided in the sources; no explicit patch/version fix is detailed. Fedora/OpenVAS...

moodleinstall-xss.txt

Source URL of this announcement: http://int21.de/cve/CVE-2008-0123-moodle.html References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0123 Description Moodle is a course management system for educators. The installer code is vulnerable to Cross Site Scripting, letting you inject...

[Full-disclosure] Cross site scripting (XSS) in Moodle 1.8.3

Source URL of this announcement: http://int21.de/cve/CVE-2008-0123-moodle.html References https://vulners.com/cve/CVE-2008-0123 Description Moodle is a course management system for educators. The installer code is vulnerable to Cross Site Scripting, letting you inject JavaScript and steal cookies...

Moodle 1.8.3 - install.php Cross-Site Scripting

Moodle 1.8.3 - install.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27259/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the brows...

Moodle 1.8.3 - 'install.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27259/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

CVE-2007-6538

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6538

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6538

SQL injection vulnerability in ing/blocks/mrbs/code/web/viewentry.php in the MRBS plugin for Moodle allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6538

The CVE-2007-6538 entry describes a SQL injection in the MRBS plugin for Moodle, affecting the file ing/blocks/mrbs/code/web/view_entry.php. The underlying issue is an injectable id parameter that allows remote attackers to execute arbitrary SQL commands. This can compromise data integrity and po...

moodle-sql.txt

Moodle.org PATH/moodle/ing/blocks/mrbs/code/web/viewentry.php?id=SQL&day=27&month=10&year=2007 And a POC: PATH/moodle/ing/blocks/mrbs/code/web/viewentry.php?id=2000%20UNION%20SELECT%20username,id,id,id,id,id,id,id,id,id,id,id%20FROM%20mdluser%20WHERE%20id=ID&day=27&month=10&year=2007...