8582 matches found
Multiple Vulnerabilities in Moodle
+------------------------------------------------------------------------------+ | | Multiple Vulnerabilities in Moodle | ================================== | | Author: Bartek Nowotarski | | Published: 2004-12-27 | +------------------------------------------------------------------------------+ 0...
[SA13091] Moodle Unspecified SQL Injection Vulnerabilities
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
Moodle < 1.4.3 Glossary Module SQLi
Binary data 2388.prm...
Moodle < 1.4.3 Multiple Vulnerabilities
The remote host is running a version of the Moodle suite that is prior to version 1.4.3. It is, therefore, affected by a SQL injection vulnerability in the 'glossary' module due to a lack of user input sanitization. In addition, Moodle has also been reported to be affected by a directory traversa...
Moodle 1.x - post.php Cross-Site Scripting
Moodle 1.x - post.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10884/info It is reported that Moodle is vulnerable to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in...
Moodle 1.x - 'post.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10884/info It is reported that Moodle is vulnerable to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic web content. This issue could permit a...
Moodle 'post.php' 'reply' Parameter XSS
The version of Moodle on the remote host contains a flaw that allows a remote cross-site scripting attack due to the application not properly validating the 'reply' variable on submission to the 'post.php' script. This allows a user to create a specially crafted URL that would execute arbitrary...
xss in moodle (post.php)
+--------------------------------+ | | | XSS in Moodle 1.3 post.php | | | +--------------------------------+ Autor: Javier Ubilla Brenni javierubillaatspymac.com Date: 02/08/04 Software Description: "Moodle is a course management system CMS - a software package designed to help educators create...
CVE-2004-1711
Cross-site scripting XSS vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter...
CVE-2004-0725
Cross-site scripting XSS vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter...
Moodle < 1.3.3 'help.php' 'file' Parameter XSS
The version of Moodle running on the remote host is affected by a cross-site scripting vulnerability. Input to the 'file' parameter of 'help.php' is not properly sanitized. A remote attacker can exploit this by tricking a user into requesting a maliciously crafted URL, resulting in stolen...
CVE-2004-0725
Cross-site scripting XSS vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter...
CVE-2004-0725
CVE-2004-0725 is a Cross-site Scripting (XSS) vulnerability in Moodle’s help.php. Affected versions include Moodle 1.3.2 and 1.4 development builds. The issue arises from unsanitized input in the file parameter of help.php, allowing remote attackers to inject arbitrary web script or HTML. Exploit...
Moodle XSS Vulnerability
Moodle XSS Vulnerability 13.07.04 Vendor: Moodle URL: http://moodle.org/ Version: Moodle 1.3.2+, Moodle 1.4 dev Risk: XSS Description: "Moodle is a course management system CMS - a software package designed to help educators create quality online courses." See http://moodle.org/ for a detailed...
Moodle Help Script 1.x - Cross-Site Scripting
Moodle Help Script 1.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/10718/info It is reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input...
Moodle Help Script 1.x - Cross-Site Scripting
source: https://www.securityfocus.com/bid/10718/info It is reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic web content...
Cross Site Scripting in Moodle < 1.3
Cross Site Scripting in Moodle 1.3 ==================================== 2004-04-30 01 Author: author: Bartek Nowotarski silence location: Trzebinia, Poland mail: silence10atwpdotpl site: silencedot0dotpl 02 Discussion: "Moodle is a course management system CMS - a software package designed to hel...
CVE-2004-1978
Cross-site scripting XSS vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter...
Moodle 1.11.2 - Cross-Site Scripting
Moodle 1.11.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/10251/info It has been reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input...
Moodle 1.1/1.2 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/10251/info It has been reported that Moodle is susceptible to a cross-site scripting vulnerability in the 'help.php' script. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamic web...