Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 1.9.12 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4305
message/refresh.php in Moodle 1.9.x prior to 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshing.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4306
Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x prior to 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4585
login/change_password.php in Moodle 1.9.x prior to 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote malicious users to obtain credentials by sniffing the network.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.14Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4588
The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x prior to 1.9.15 uses an incorrect data type, which allows remote malicious users to bypass intended IP address restrictions via an XMLRPC request.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.14Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2012-0792
mod/forum/user.php in Moodle 1.9.x prior to 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.14Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2012-2362
Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x prior to 1.9.18, when Internet Explorer is used, allows remote malicious users to inject arbitrary web script or HTML via a crafted parameter to blog/index.php.
Moodle Moodle 1.9.4Moodle Moodle 1.9.17Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.16Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.14Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2012-2363
SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x prior to 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event.
Moodle Moodle 1.9.6Moodle Moodle 1.9.5Moodle Moodle 1.9.12Moodle Moodle 1.9.13Moodle Moodle 1.9.14Moodle Moodle 1.9.7Moodle Moodle 1.9.4Moodle Moodle 1.9.10Moodle Moodle 1.9.17Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.9.3Moodle Moodle 1.9.16Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.9
NA
CVE-2011-4294
The error-message functionality in Moodle 1.9.x prior to 1.9.13, 2.0.x prior to 2.0.4, and 2.1.x prior to 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow malicious users to trick users into visiting ar...
Moodle Moodle 2.0.2Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 2.0.1Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 2.0.3Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7Moodle Moodle 2.0.0Moodle Moodle 2.1.0
NA
CVE-2011-4301
The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x prior to 1.9.14, 2.0.x prior to 2.0.5, and 2.1.x prior to 2.1.2 does not recognize Forms API setConstant operations, which allows remote malicious users to submit unexpected form content by modifyi...
Moodle Moodle 2.0.2Moodle Moodle 1.9.4Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 2.0.1Moodle Moodle 1.9.11Moodle Moodle 2.0.4Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 2.0.3Moodle Moodle 2.1.1Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7Moodle Moodle 2.0.0Moodle Moodle 2.1.0
NA
CVE-2011-4302
mnet/xmlrpc/client.php in MNET in Moodle 1.9.x prior to 1.9.14, 2.0.x prior to 2.0.5, and 2.1.x prior to 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote malicious users to bypass validation via a crafted certificate.
Moodle Moodle 2.0.2Moodle Moodle 1.9.4Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 2.0.1Moodle Moodle 1.9.11Moodle Moodle 2.0.4Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 2.0.3Moodle Moodle 2.1.1Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7Moodle Moodle 2.0.0Moodle Moodle 2.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook