Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 1.4.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2004-1424
Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the search parameter.
Moodle Moodle 1.2.0Moodle Moodle 1.2.1Moodle Moodle 1.4.2Moodle Moodle 1.3.2Moodle Moodle 1.3.3Moodle Moodle 1.3.0Moodle Moodle 1.3.1Moodle Moodle 1.1.1Moodle Moodle 1.3.4Moodle Moodle 1.4.1
5
CVSSv2
CVE-2004-1425
Directory traversal vulnerability in file.php in Moodle 1.4.2 and previous versions allows remote malicious users to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.
Moodle Moodle 1.1.1Moodle Moodle 1.3.4Moodle Moodle 1.4.1Moodle Moodle 1.3.0Moodle Moodle 1.3.1Moodle Moodle 1.2.0Moodle Moodle 1.2.1Moodle Moodle 1.4.2Moodle Moodle 1.3.2Moodle Moodle 1.3.3
10
CVSSv2
CVE-2005-2247
Multiple unknown vulnerabilities in Moodle prior to 1.5.1 have unknown impact and attack vectors.
Moodle Moodle 1.2.1Moodle Moodle 1.3.1Moodle Moodle 1.4.2Moodle Moodle 1.4.4Moodle Moodle 1.1.1Moodle Moodle 1.5Moodle Moodle 1.5 BetaMoodle Moodle 1.3.2Moodle Moodle 1.3.3Moodle Moodle 1.3.4Moodle Moodle 1.4.1Moodle Moodle 1.2.0Moodle Moodle 1.3.0Moodle Moodle 1.4.3Moodle Moodle 1.4.5
4.3
CVSSv2
CVE-2008-5432
Cross-site scripting (XSS) vulnerability in Moodle prior to 1.6.8, 1.7 prior to 1.7.6, 1.8 prior to 1.8.7, and 1.9 prior to 1.9.3 allows remote malicious users to inject arbitrary web script or HTML via a Wiki page name (aka page title).
Moodle Moodle 1.6.6Moodle Moodle 1.6.5Moodle Moodle 1.5Moodle Moodle 1.4.5Moodle Moodle 1.3.2Moodle Moodle 1.3.1Moodle Moodle 1.7.4Moodle Moodle 1.7.3Moodle Moodle 1.8.4Moodle Moodle 1.8.5Moodle Moodle 1.6.4Moodle Moodle 1.6.3Moodle Moodle 1.4.4Moodle Moodle 1.4.3Moodle Moodle 1.3.0Moodle Moodle 1.2.1Moodle Moodle 1.7.2Moodle Moodle 1.7.1Moodle Moodle 1.8.6Moodle Moodle 1.9.0Moodle Moodle 1.6.1Moodle Moodle 1.6.0
4.3
CVSSv2
CVE-2008-1502
The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare prior to 1.4.003, Moodle prior to 1.8.5, and other products, allows remote malicious users to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string contai...
Moodle Moodle 1.8.1Moodle Moodle 1.6.7Moodle Moodle 1.5.0Moodle Moodle 1.5.3Moodle Moodle 1.4.2Moodle Moodle 1.4.1Moodle Moodle 1.2.0Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.7.4Moodle Moodle 1.7.3Moodle Moodle 1.6.4Moodle Moodle 1.6.3Moodle Moodle 1.6.2Moodle Moodle 1.5Moodle Moodle 1.4.5Moodle Moodle 1.3.2Moodle Moodle 1.3.1Egroupware Egroupware 1.0.3Egroupware Egroupware 1.0.1Moodle Moodle 1.7.6Moodle Moodle 1.7.5
4.3
CVSSv2
CVE-2010-2228
Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle prior to 1.8.13 and 1.9.x prior to 1.9.9 allows remote malicious users to inject arbitrary web script or HTML via vectors involving extended characters in a username.
Moodle Moodle 1.1.1Moodle Moodle 1.2.0Moodle Moodle 1.4.1Moodle Moodle 1.4.2Moodle Moodle 1.5.3Moodle Moodle 1.5.0Moodle Moodle 1.6.7Moodle Moodle 1.6.8Moodle Moodle 1.2.1Moodle Moodle 1.3.0Moodle Moodle 1.4.3Moodle Moodle 1.4.4Moodle Moodle 1.6.0Moodle Moodle 1.6.1Moodle Moodle 1.7.1Moodle Moodle 1.8.1Moodle Moodle 1.8.2Moodle Moodle 1.8.9Moodle Moodle 1.8.10Moodle Moodle 1.3.1Moodle Moodle 1.3.2Moodle Moodle 1.4.5
4.3
CVSSv2
CVE-2010-2229
Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle prior to 1.8.13 and 1.9.x prior to 1.9.9 allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters.
Moodle Moodle 1.8.7Moodle Moodle 1.8.6Moodle Moodle 1.7.3Moodle Moodle 1.6.4Moodle Moodle 1.6.6Moodle Moodle 1.5.1Moodle Moodle 1.5.2Moodle Moodle 1.4.4Moodle Moodle 1.3.4Moodle Moodle 1.8.9Moodle Moodle 1.8.8Moodle Moodle 1.8.1Moodle Moodle 1.6.3Moodle Moodle 1.6.5Moodle Moodle 1.6.2Moodle Moodle 1.5Moodle Moodle 1.4.2Moodle Moodle 1.4.5Moodle Moodle 1.2.0Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.8.5
4
CVSSv2
CVE-2010-2230
The KSES text cleaning filter in lib/weblib.php in Moodle prior to 1.8.13 and 1.9.x prior to 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.
Moodle Moodle 1.8.9Moodle Moodle 1.8.8Moodle Moodle 1.6.3Moodle Moodle 1.6.5Moodle Moodle 1.6.2Moodle Moodle 1.5Moodle Moodle 1.5.1Moodle Moodle 1.4.5Moodle Moodle 1.4.4Moodle Moodle 1.2.0Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.8.4Moodle Moodle 1.8.3Moodle Moodle 1.7.6Moodle Moodle 1.7.4Moodle Moodle 1.6.8Moodle Moodle 1.6.7Moodle Moodle 1.5.0Moodle Moodle 1.4.1Moodle Moodle 1.3.0Moodle Moodle 1.3.3
6.8
CVSSv2
CVE-2010-2231
Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle prior to 1.8.13 and 1.9.x prior to 1.9.9 allows remote malicious users to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attempt...
Moodle Moodle 1.8.8Moodle Moodle 1.8.7Moodle Moodle 1.6.5Moodle Moodle 1.6.4Moodle Moodle 1.5Moodle Moodle 1.5.1Moodle Moodle 1.4.5Moodle Moodle 1.4.4Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.8.11Moodle Moodle 1.8.4Moodle Moodle 1.8.3Moodle Moodle 1.7.6Moodle Moodle 1.7.4Moodle Moodle 1.6.7Moodle Moodle 1.6.0Moodle Moodle 1.5.0Moodle Moodle 1.4.1Moodle Moodle 1.3.0Moodle Moodle 1.3.3Moodle Moodle 1.3.2
5
CVSSv2
CVE-2013-1830
user/view.php in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.8, 2.3.x prior to 2.3.5, and 2.4.x prior to 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote malicious users to obtain sensitive course-profile information by leveraging the guest ...
Fedoraproject Fedora 18Fedoraproject Fedora 17Moodle Moodle 2.2.4Moodle Moodle 2.2.5Moodle Moodle 2.2.3Moodle Moodle 2.2.1Moodle Moodle 2.2.2Moodle Moodle 2.2.7Moodle Moodle 2.2.6Moodle Moodle 2.2.0Moodle Moodle 2.4.1Moodle Moodle 2.4.0Moodle Moodle 2.3.2Moodle Moodle 2.3.4Moodle Moodle 2.3.1Moodle Moodle 2.3.0Moodle Moodle 2.3.3Moodle Moodle 2.1.5Moodle Moodle 2.1.2Moodle Moodle 2.1.9Moodle Moodle 2.0.3Moodle Moodle 2.0.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook