Moodle post.php XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross site scripting attack because the application does not validate the 'reply' variable upon submission to the 'post.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary...

Moodle post.php XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross site scripting attack because the application does not validate the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Moodle XSS

The remote host is using Moodle, a course management system CMS. There is a bug in this software that makes it vulnerable to cross site scripting attacks. An attacker may use this bug to steal the credentials of the legitimate users of this site. OpenVAS Vulnerability Test $Id: moodlexss.nasl 908...

CVE-2004-2232

The CVE covers Moodle

CVE-2004-2233

Technical details for CVE-2004-2233 are not publicly available in the provided documents. Monitor for updates as more information may be published.

CVE-2004-2236

Technical details are not publicly available in the provided documents for CVE-2004-2236; the only information is that Moodle before 1.3.3 has an unknown vulnerability related to language setting. Monitor for updates.

CVE-2004-2237

Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."...

CVE-2004-2233

Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors...

CVE-2004-2235

Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text...

CVE-2004-2232

SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements...

CVE-2004-2234

CVE-2004-2234 concerns Moodle before 1.2, where teachers could log in as administrators due to an unspecified vulnerability (privilege escalation). Connected sources consistently reference Moodle

CVE-2004-2235

Technical details are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected Moodle versions or root cause are given here.

CVE-2004-2236

Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting...

CVE-2004-2237

Technical details for CVE-2004-2237 are not publicly available in the provided documents. Monitor for updates and expect future disclosures before any assessment of impact or remediation.

CVE-2004-2234

Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators...

Moodle Detection

The remote host is running Moodle, an open source course or learning management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18690; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/05/28";...

Moodle < 1.5.1 Multiple Vulnerabilities

According to its banner, the version of Moodle installed on the remote host is affected by multiple unspecified vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid18691; scriptversion"1.17";...

CVE-2005-2247

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors...

CVE-2005-2247

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors...

CVE-2005-2247

The CVE-2005-2247 entry concerns Moodle prior to 1.5.1, described as containing multiple unknown vulnerabilities with unknown impact and attack vectors. The connected Nessus plugin explicitly lists Moodle