Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 1.7.4 vulnerabilities and exploits

(subscribe to this query)
2.6
CVSSv2
CVE-2008-3326
Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x prior to 1.6.7 and 1.7.x prior to 1.7.5 allows remote malicious users to inject arbitrary web script or HTML via the etitle parameter (blog entry title).
Moodle Moodle 1.6.0Moodle Moodle 1.6.1Moodle Moodle 1.6.2Moodle Moodle 1.7.2Moodle Moodle 1.7.3Moodle Moodle 1.6.3Moodle Moodle 1.6.4Moodle Moodle 1.7.4Moodle Moodle 1.6.5Moodle Moodle 1.6.6Moodle Moodle 1.7.1
6.4
CVSSv2
CVE-2009-0499
Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 prior to 1.7.7, 1.8 prior to 1.8.8, and 1.9 prior to 1.9.4 allows remote malicious users to delete unauthorized forum posts via a link or IMG tag to post.php.
Moodle Moodle 1.7.5Moodle Moodle 1.7.6Moodle Moodle 1.8.5Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.7.3Moodle Moodle 1.7.4Moodle Moodle 1.8.4Moodle Moodle 1.8.6Moodle Moodle 1.7.1Moodle Moodle 1.7.2Moodle Moodle 1.8.2Moodle Moodle 1.8.3Moodle Moodle 1.9.3Moodle Moodle 1.8.1Moodle Moodle 1.8.7
4.3
CVSSv2
CVE-2009-0502
Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 prior to 1.6.9, 1.7 prior to 1.7.7, 1.8 prior to 1.8.8, and 1.9 prior to 1.9.4, allows remote malicious users to inject arbitrary web script or HTML via an HTML block, wh...
Snoopy Snoopy 1.2.3Moodle Moodle 1.7.4Moodle Moodle 1.7.5Moodle Moodle 1.8.5Moodle Moodle 1.9.2Moodle Moodle 1.7.0Moodle Moodle 1.7.1Moodle Moodle 1.8.2Moodle Moodle 1.8.3Moodle Moodle 1.8.7Moodle Moodle 1.9.3Moodle Moodle 1.7.2Moodle Moodle 1.7.3Moodle Moodle 1.8.4Moodle Moodle 1.8.6Moodle Moodle 1.7.6Moodle Moodle 1.8.1Moodle Moodle 1.9.1
4.3
CVSSv2
CVE-2009-0500
Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 prior to 1.6.9, 1.7 prior to 1.7.7, 1.8 prior to 1.8.8, and 1.9 prior to 1.9.4 allows remote malicious users to inject arbitrary web script or HTML via crafted log table information that is not properly hand...
Moodle Moodle 1.7.1Moodle Moodle 1.7.2Moodle Moodle 1.8.2Moodle Moodle 1.8.3Moodle Moodle 1.8.7Moodle Moodle 1.9.3Moodle Moodle 1.6.6Moodle Moodle 1.6.8Moodle Moodle 1.7.3Moodle Moodle 1.7.4Moodle Moodle 1.8.4Moodle Moodle 1.8.6Moodle Moodle 1.6.7Moodle Moodle 1.6.3Moodle Moodle 1.6.5Moodle Moodle 1.7.5Moodle Moodle 1.7.6Moodle Moodle 1.8.5Moodle Moodle 1.9.2Moodle Moodle 1.6.0Moodle Moodle 1.6.4Moodle Moodle 1.8.1
4.3
CVSSv2
CVE-2009-1171
The TeX filter in Moodle 1.6 prior to 1.6.9+, 1.7 prior to 1.7.7+, 1.8 prior to 1.8.9, and 1.9 prior to 1.9.5 allows user-assisted malicious users to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the file.
Moodle Moodle 1.6.4Moodle Moodle 1.6.1Moodle Moodle 1.7.1Moodle Moodle 1.8.5Moodle Moodle 1.8.4Moodle Moodle 1.9.3Moodle Moodle 1.6.7Moodle Moodle 1.6.8Moodle Moodle 1.7.6Moodle Moodle 1.8.2Moodle Moodle 1.8.1Moodle Moodle 1.8.8Moodle Moodle 1.9.4Moodle Moodle 1.6.3Moodle Moodle 1.6.5Moodle Moodle 1.6.0Moodle Moodle 1.7.4Moodle Moodle 1.7.5Moodle Moodle 1.8.3Moodle Moodle 1.8.6Moodle Moodle 1.9.2Moodle Moodle 1.9.1
4.3
CVSSv2
CVE-2008-5432
Cross-site scripting (XSS) vulnerability in Moodle prior to 1.6.8, 1.7 prior to 1.7.6, 1.8 prior to 1.8.7, and 1.9 prior to 1.9.3 allows remote malicious users to inject arbitrary web script or HTML via a Wiki page name (aka page title).
Moodle Moodle 1.6.6Moodle Moodle 1.6.5Moodle Moodle 1.5Moodle Moodle 1.4.5Moodle Moodle 1.3.2Moodle Moodle 1.3.1Moodle Moodle 1.7.4Moodle Moodle 1.7.3Moodle Moodle 1.8.4Moodle Moodle 1.8.5Moodle Moodle 1.6.4Moodle Moodle 1.6.3Moodle Moodle 1.4.4Moodle Moodle 1.4.3Moodle Moodle 1.3.0Moodle Moodle 1.2.1Moodle Moodle 1.7.2Moodle Moodle 1.7.1Moodle Moodle 1.8.6Moodle Moodle 1.9.0Moodle Moodle 1.6.1Moodle Moodle 1.6.0
4.3
CVSSv2
CVE-2008-1502
The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare prior to 1.4.003, Moodle prior to 1.8.5, and other products, allows remote malicious users to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string contai...
Moodle Moodle 1.8.1Moodle Moodle 1.6.7Moodle Moodle 1.5.0Moodle Moodle 1.5.3Moodle Moodle 1.4.2Moodle Moodle 1.4.1Moodle Moodle 1.2.0Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.7.4Moodle Moodle 1.7.3Moodle Moodle 1.6.4Moodle Moodle 1.6.3Moodle Moodle 1.6.2Moodle Moodle 1.5Moodle Moodle 1.4.5Moodle Moodle 1.3.2Moodle Moodle 1.3.1Egroupware Egroupware 1.0.3Egroupware Egroupware 1.0.1Moodle Moodle 1.7.6Moodle Moodle 1.7.5
4.3
CVSSv2
CVE-2010-2228
Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle prior to 1.8.13 and 1.9.x prior to 1.9.9 allows remote malicious users to inject arbitrary web script or HTML via vectors involving extended characters in a username.
Moodle Moodle 1.1.1Moodle Moodle 1.2.0Moodle Moodle 1.4.1Moodle Moodle 1.4.2Moodle Moodle 1.5.3Moodle Moodle 1.5.0Moodle Moodle 1.6.7Moodle Moodle 1.6.8Moodle Moodle 1.2.1Moodle Moodle 1.3.0Moodle Moodle 1.4.3Moodle Moodle 1.4.4Moodle Moodle 1.6.0Moodle Moodle 1.6.1Moodle Moodle 1.7.1Moodle Moodle 1.8.1Moodle Moodle 1.8.2Moodle Moodle 1.8.9Moodle Moodle 1.8.10Moodle Moodle 1.3.1Moodle Moodle 1.3.2Moodle Moodle 1.4.5
4.3
CVSSv2
CVE-2010-2229
Multiple cross-site scripting (XSS) vulnerabilities in blog/index.php in Moodle prior to 1.8.13 and 1.9.x prior to 1.9.9 allow remote malicious users to inject arbitrary web script or HTML via unspecified parameters.
Moodle Moodle 1.8.7Moodle Moodle 1.8.6Moodle Moodle 1.7.3Moodle Moodle 1.6.4Moodle Moodle 1.6.6Moodle Moodle 1.5.1Moodle Moodle 1.5.2Moodle Moodle 1.4.4Moodle Moodle 1.3.4Moodle Moodle 1.8.9Moodle Moodle 1.8.8Moodle Moodle 1.8.1Moodle Moodle 1.6.3Moodle Moodle 1.6.5Moodle Moodle 1.6.2Moodle Moodle 1.5Moodle Moodle 1.4.2Moodle Moodle 1.4.5Moodle Moodle 1.2.0Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.8.5
4
CVSSv2
CVE-2010-2230
The KSES text cleaning filter in lib/weblib.php in Moodle prior to 1.8.13 and 1.9.x prior to 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.
Moodle Moodle 1.8.9Moodle Moodle 1.8.8Moodle Moodle 1.6.3Moodle Moodle 1.6.5Moodle Moodle 1.6.2Moodle Moodle 1.5Moodle Moodle 1.5.1Moodle Moodle 1.4.5Moodle Moodle 1.4.4Moodle Moodle 1.2.0Moodle Moodle 1.1.1Moodle MoodleMoodle Moodle 1.8.4Moodle Moodle 1.8.3Moodle Moodle 1.7.6Moodle Moodle 1.7.4Moodle Moodle 1.6.8Moodle Moodle 1.6.7Moodle Moodle 1.5.0Moodle Moodle 1.4.1Moodle Moodle 1.3.0Moodle Moodle 1.3.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook