Lucene search
Veracode Vulnerability DatabaseVERACODE:4619HistoryJul 20, 2017 - 8:58 a.m.
Cross-Site Scripting (XSS)
2017-07-2008:58:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
47.7%
Moodle is susceptible to cross-site scripting (XSS) attacks. The attacks are possible because the idnumber field used in the administration of cohorts is not properly escaped. The artifact is due to incorrect fix for CVE-2012-2365.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34045
openwall.com/lists/oss-security/2012/07/17/1
secunia.com/advisories/49890
www.securityfocus.com/bid/54481
exchange.xforce.ibmcloud.com/vulnerabilities/76962
git.moodle.org/gw?p=moodle.git;a=commit;h=136341673574a87585e7374140121aec4ad6810f
Related
prion
prion
Cross site scripting
2012-07-23 21:55:00
Cross site scripting
2012-07-21 03:38:00
nvd
nvd
CVE-2012-3396
2012-07-23 21:55:04
CVE-2012-2365
2012-07-21 03:38:56
cve
cve
CVE-2012-3396
2012-07-23 21:55:04
CVE-2012-2365
2012-07-21 03:38:56
ubuntucve
ubuntucve
CVE-2012-3396
2012-07-23 00:00:00
CVE-2012-2365
2012-07-21 00:00:00
cvelist
cvelist
CVE-2012-3396
2012-07-23 21:00:00
CVE-2012-2365
2012-07-21 01:00:00
veracode
veracode
Cross-site Scripting (XSS)
2017-06-01 06:40:24
nessus
nessus
Moodle 2.3.x < 2.3.1 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.0.x < 2.0.10 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.1.x < 2.1.7 Multiple Vulnerabilities
2016-07-21 00:00:00
openvas
openvas
Fedora Update for moodle FEDORA-2012-11039
2012-08-30 00:00:00
Fedora Update for moodle FEDORA-2012-11028
2012-08-03 00:00:00
Fedora Update for moodle FEDORA-2012-11028
2012-08-03 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: moodle-2.0.10-1.fc16
2012-08-01 22:27:44
[SECURITY] Fedora 17 Update: moodle-2.2.4-1.fc17
2012-08-01 22:28:41
[SECURITY] Fedora 17 Update: moodle-2.2.3-1.fc17
2012-06-01 17:01:55