CVE-2012-2366

mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, which allows remote authenticated users to overwrite arbitrary database activity presets via unspecified vectors...

CVE-2012-2366: Undefined Security Weakness

mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, which allows remote authenticated users to overwrite arbitrary database activity presets via unspecified vectors...

PT-2012-3987

Name of the Vulnerable Software and Affected Versions Moodle versions 2.1.x through 2.1.5 Moodle versions 2.2.x through 2.2.2 Description The issue is related to the mod/data/preset.php file in Moodle, which does not properly iterate through an array. This allows remote authenticated users to...

CVE-2011-4581

mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover the username of a wiki creator by visiting the history and deletion user interface...

CVE-2011-4581: Exposure of Sensitive Information to an Unauthorized Actor

mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover the username of a wiki creator by visiting the history and deletion user interface...

CVE-2012-0792

mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts...

CVE-2012-0792: Exposure of Sensitive Information to an Unauthorized Actor

mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts...

PT-2012-5126

Name of the Vulnerable Software and Affected Versions Sticky Notes versions prior to 0.2.27052012.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the paste id in "admin/modules/mod pastes.php" or "show.php",...

CVE-2011-4298

Multiple cross-site request forgery CSRF vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data...

CVE-2011-4299

Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...

CVE-2011-4298

Multiple cross-site request forgery CSRF vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data...

CVE-2011-4307

Cross-site scripting XSS vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter...

CVE-2011-4308

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors...

CVE-2011-4308: Undefined Security Weakness

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors...

CVE-2011-4298: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data...

PT-2012-5064

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.63 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via a .IT file, due to heap memory corruption in the in mod plugin. Recommendations For versions prior to...

PT-2012-5063

Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.63 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via a .IT file, due to memory corruption in the in mod plugin. Recommendations For versions prior to 5.63,...

PT-2012-1856

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.13 Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description The issue allows remote authenticated users to discover the names of other users via unspecified vectors in the...

PT-2012-1846

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.x through 2.0.4 Moodle versions 2.1.x through 2.1.1 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data due to multiple cross-site request forgery...

CVE-2011-4299: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment...