8582 matches found
Moodle < 1.5.1 Unspecified Vulnerability
Binary data 3063.prm...
[SA16028] Moodle Unspecified Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CYBSEC - PHPMailer Infinite Loop Denial of Service
CYBSEC S.A. www.cybsec.com Advisory Name: PHPMailer Infinite Loop Denial of Service ============== Vulnerability Class: Denial of Service ==================== Release Date: 05.27.2005 ============= Affected Applications: ====================== PHPMailer = 1.72 Affected Platforms:...
CVE-2004-1978
Cross-site scripting XSS vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter...
CVE-2004-1978
The vulnerability is in Moodle (a CMS) prior to version 1.3, in help.php, where a cross‑site scripting (XSS) flaw exists that allows a remote attacker to inject arbitrary HTML/script via the text parameter. Exploitation details are not provided in the primary sources, though OpenVAS entries descr...
CVE-2004-1711
Moodle post.php XSS (CVE-2004-1711) affects Moodle prior to 1.3. The vulnerability arises from not validating the reply parameter in post.php, enabling remote XSS via crafted URLs. OpenVAS entries confirm a remote XSS in Moodle post.php by tampering with the reply variable; no explicit exploit de...
CVE-2004-1711
Cross-site scripting XSS vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter...
CVE-2004-1425
CVE-2004-1425 describes a directory traversal vulnerability in Moodle 1.4.2 and earlier, where an attacker can read arbitrary session files by manipulating the file parameter with a .. sequence. The affected component is Moodle’s file.php; root cause is improper validation of the file path, enabl...
CVE-2004-1425
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. dot dot in the file parameter...
CVE-2004-1424
CVE-2004-1424 affects Moodle 1.4.2 and earlier. A cross-site scripting (XSS) flaw exists in view.php where the search parameter can be exploited to inject arbitrary scripts/HTML. This is a remote, unauthenticated vector; impact includes potential partial integrity compromise and user-facing scrip...
CVE-2004-1424
Cross-site scripting XSS vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
moodle142.txt
+------------------------------------------------------------------------------+ | | | Multiple Vulnerabilities in Moodle | | ================================== | | | | Author: Bartek Nowotarski | | Published: 2004-12-27 |...
CVE-2004-1424
Cross-site scripting XSS vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter...
CVE-2004-1425
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. dot dot in the file parameter...
CVE-2004-2234
Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators...
CVE-2004-2233
Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors...
CVE-2004-2235
Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text...
CVE-2004-2236
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting...