Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 1.9.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4133
Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x prior to 1.9.11 allows remote malicious users to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.2Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4290
Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x prior to 1.9.12 allow remote malicious users to inject arbitrary web script or HTML via vectors related to URL encoding.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4278
Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x prior to 1.9.11 and 2.0.x prior to 2.0.2 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 2.0.1Moodle Moodle 1.9.2Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7Moodle Moodle 2.0.0
NA
CVE-2011-4283
Moodle 1.9.x prior to 1.9.11 and 2.0.x prior to 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote malicious users to obtain sensitive information via a request for imsenterprise-enrol.xml.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 2.0.1Moodle Moodle 1.9.2Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7Moodle Moodle 2.0.0
NA
CVE-2011-4286
Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x prior to 1.9.11 and 2.0.x prior to 2.0.2 allow remote malicious users to inject arbitrary web script or HTML via vectors involving (1) Flash Vid...
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 2.0.1Moodle Moodle 1.9.2Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7Moodle Moodle 2.0.0
NA
CVE-2011-4288
Moodle 1.9.x prior to 1.9.12 and 2.0.x prior to 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role.
Moodle Moodle 2.0.2Moodle Moodle 1.9.4Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 2.0.1Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7Moodle Moodle 2.0.0
NA
CVE-2011-4305
message/refresh.php in Moodle 1.9.x prior to 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshing.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4306
Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x prior to 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4585
login/change_password.php in Moodle 1.9.x prior to 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote malicious users to obtain credentials by sniffing the network.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.14Moodle Moodle 1.9.8Moodle Moodle 1.9.7
NA
CVE-2011-4588
The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x prior to 1.9.15 uses an incorrect data type, which allows remote malicious users to bypass intended IP address restrictions via an XMLRPC request.
Moodle Moodle 1.9.4Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.9Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.3Moodle Moodle 1.9.13Moodle Moodle 1.9.5Moodle Moodle 1.9.14Moodle Moodle 1.9.8Moodle Moodle 1.9.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook