Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 1.9.17 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2012-2362
Cross-site scripting (XSS) vulnerability in blog/lib.php in the blog implementation in Moodle 1.9.x prior to 1.9.18, when Internet Explorer is used, allows remote malicious users to inject arbitrary web script or HTML via a crafted parameter to blog/index.php.
Moodle Moodle 1.9.4Moodle Moodle 1.9.17Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.16Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.14Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2012-2363
SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x prior to 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event.
Moodle Moodle 1.9.6Moodle Moodle 1.9.5Moodle Moodle 1.9.12Moodle Moodle 1.9.13Moodle Moodle 1.9.14Moodle Moodle 1.9.7Moodle Moodle 1.9.4Moodle Moodle 1.9.10Moodle Moodle 1.9.17Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.9.3Moodle Moodle 1.9.16Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.9
NA
CVE-2012-2367
Moodle 1.9.x prior to 1.9.18, 2.0.x prior to 2.0.9, 2.1.x prior to 2.1.6, and 2.2.x prior to 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and add a calendar entry via a New Entry action.
Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.5Moodle Moodle 1.9.7Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.10Moodle Moodle 1.9.14Moodle Moodle 1.9.11Moodle Moodle 1.9.4Moodle Moodle 1.9.9Moodle Moodle 1.9.17Moodle Moodle 1.9.16Moodle Moodle 1.9.3Moodle Moodle 1.9.12Moodle Moodle 1.9.13Moodle Moodle 2.0.6Moodle Moodle 2.0.5Moodle Moodle 2.0.4Moodle Moodle 2.0.1Moodle Moodle 2.0.7
NA
CVE-2012-3398
Algorithmic complexity vulnerability in Moodle 1.9.x prior to 1.9.19, 2.0.x prior to 2.0.10, 2.1.x prior to 2.1.7, and 2.2.x prior to 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity...
Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.5Moodle Moodle 2.0.6Moodle Moodle 2.0.5Moodle Moodle 2.1.1Moodle Moodle 2.1.3Moodle Moodle 2.2.2Moodle Moodle 2.2.1Moodle Moodle 1.9.7Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.10Moodle Moodle 1.9.14Moodle Moodle 1.9.18Moodle Moodle 2.0.8Moodle Moodle 2.0.1Moodle Moodle 2.1.4Moodle Moodle 2.1.6Moodle Moodle 1.9.11Moodle Moodle 1.9.4
NA
CVE-2012-6098
grade/edit/outcome/edit_form.php in Moodle 1.9.x up to and including 1.9.19, 2.1.x prior to 2.1.10, 2.2.x prior to 2.2.7, 2.3.x prior to 2.3.4, and 2.4.x prior to 2.4.1 does not properly enforce the moodle/grade:manage capability requirement, which allows remote authenticated use...
Moodle Moodle 1.9.16Moodle Moodle 1.9.8Moodle Moodle 1.9.6Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.9Moodle Moodle 1.9.17Moodle Moodle 1.9.18Moodle Moodle 1.9.7Moodle Moodle 1.9.15Moodle Moodle 1.9.4Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.14Moodle Moodle 1.9.1Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.13Moodle Moodle 2.1.0Moodle Moodle 2.1.4Moodle Moodle 2.1.7Moodle Moodle 2.1.8
NA
CVE-2013-1834
notes/edit.php in Moodle 1.9.x up to and including 1.9.19, 2.x up to and including 2.1.10, 2.2.x prior to 2.2.8, 2.3.x prior to 2.3.5, and 2.4.x prior to 2.4.2 allows remote authenticated users to reassign notes via a modified (1) userid or (2) courseid field.
Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.12Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.9.17Moodle Moodle 1.9.6Moodle Moodle 1.9.16Moodle Moodle 1.9.7Moodle Moodle 1.9.8Moodle Moodle 1.9.10Moodle Moodle 1.9.13Moodle Moodle 1.9.14Moodle Moodle 1.9.15Moodle Moodle 1.9.4Moodle Moodle 1.9.9Moodle Moodle 1.9.18Moodle Moodle 1.9.19Moodle Moodle 2.0.2Moodle Moodle 2.0.9Moodle Moodle 2.1.4
NA
CVE-2013-1830
user/view.php in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.8, 2.3.x prior to 2.3.5, and 2.4.x prior to 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote malicious users to obtain sensitive course-profile information by leveraging the guest ...
Fedoraproject Fedora 18Fedoraproject Fedora 17Moodle Moodle 2.2.4Moodle Moodle 2.2.5Moodle Moodle 2.2.3Moodle Moodle 2.2.1Moodle Moodle 2.2.2Moodle Moodle 2.2.7Moodle Moodle 2.2.6Moodle Moodle 2.2.0Moodle Moodle 2.4.1Moodle Moodle 2.4.0Moodle Moodle 2.3.2Moodle Moodle 2.3.4Moodle Moodle 2.3.1Moodle Moodle 2.3.0Moodle Moodle 2.3.3Moodle Moodle 2.1.5Moodle Moodle 2.1.2Moodle Moodle 2.1.9Moodle Moodle 2.0.3Moodle Moodle 2.0.7
NA
CVE-2013-1831
lib/setuplib.php in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.8, 2.3.x prior to 2.3.5, and 2.4.x prior to 2.4.2 allows remote malicious users to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message.
Moodle Moodle 2.1.10Moodle Moodle 2.1.5Moodle Moodle 2.1.0Moodle Moodle 2.1.4Moodle Moodle 2.1.2Moodle Moodle 2.0.4Moodle Moodle 2.0.3Moodle Moodle 2.0.5Moodle Moodle 2.0.0Moodle Moodle 1.8.8Moodle Moodle 1.5Moodle Moodle 1.6.3Moodle Moodle 1.3.1Moodle Moodle 1.9.8Moodle Moodle 1.8.14Moodle Moodle 1.5.2Moodle Moodle 1.5.3Moodle Moodle 1.8.7Moodle Moodle 1.9.3Moodle Moodle 1.8.10Moodle Moodle 1.8.9Moodle Moodle 1.9.2
NA
CVE-2013-4524
Directory traversal vulnerability in repository/filesystem/lib.php in Moodle up to and including 2.2.11, 2.3.x prior to 2.3.10, 2.4.x prior to 2.4.7, and 2.5.x prior to 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path.
Moodle Moodle 2.5.1Moodle Moodle 2.4.2Moodle Moodle 2.4.4Moodle Moodle 2.3.4Moodle Moodle 2.3.6Moodle Moodle 2.2.5Moodle Moodle 2.2.3Moodle Moodle 2.2.0Moodle Moodle 2.1.8Moodle Moodle 2.1.10Moodle Moodle 2.1.0Moodle Moodle 2.0.3Moodle Moodle 2.0.1Moodle Moodle 1.9.6Moodle Moodle 1.9.4Moodle Moodle 1.9.14Moodle Moodle 1.9.12Moodle Moodle 1.8.7Moodle Moodle 1.8.5Moodle Moodle 1.8.13Moodle Moodle 1.8.11Moodle Moodle 1.7.3
NA
CVE-2013-4522
lib/filelib.php in Moodle up to and including 2.2.11, 2.3.x prior to 2.3.10, 2.4.x prior to 2.4.7, and 2.5.x prior to 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote malicious users to obtain sensitive information by requesting a file that...
Moodle Moodle 2.4.0Moodle Moodle 2.4.1Moodle Moodle 2.4.2Moodle Moodle 2.4.3Moodle Moodle 2.2.9Moodle Moodle 2.2.8Moodle Moodle 2.2.7Moodle Moodle 2.2.6Moodle Moodle 2.5.0Moodle Moodle 2.5.2Moodle Moodle 2.4.5Moodle Moodle 2.3.0Moodle Moodle 2.3.5Moodle Moodle 2.3.7Moodle Moodle 2.2.4Moodle Moodle 2.2.2Moodle Moodle 2.1.7Moodle Moodle 2.1.5Moodle Moodle 2.1.1Moodle Moodle 2.0.9Moodle Moodle 2.0.2Moodle Moodle 2.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook