Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 1.9.8 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2013-4524
Directory traversal vulnerability in repository/filesystem/lib.php in Moodle up to and including 2.2.11, 2.3.x prior to 2.3.10, 2.4.x prior to 2.4.7, and 2.5.x prior to 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path.
Moodle Moodle 2.5.1Moodle Moodle 2.4.2Moodle Moodle 2.4.4Moodle Moodle 2.3.4Moodle Moodle 2.3.6Moodle Moodle 2.2.5Moodle Moodle 2.2.3Moodle Moodle 2.2.0Moodle Moodle 2.1.8Moodle Moodle 2.1.10Moodle Moodle 2.1.0Moodle Moodle 2.0.3Moodle Moodle 2.0.1Moodle Moodle 1.9.6Moodle Moodle 1.9.4Moodle Moodle 1.9.14Moodle Moodle 1.9.12Moodle Moodle 1.8.7Moodle Moodle 1.8.5Moodle Moodle 1.8.13Moodle Moodle 1.8.11Moodle Moodle 1.7.3
5
CVSSv2
CVE-2013-4522
lib/filelib.php in Moodle up to and including 2.2.11, 2.3.x prior to 2.3.10, 2.4.x prior to 2.4.7, and 2.5.x prior to 2.5.3 does not send "Cache-Control: private" HTTP headers, which allows remote malicious users to obtain sensitive information by requesting a file that...
Moodle Moodle 2.4.0Moodle Moodle 2.4.1Moodle Moodle 2.4.2Moodle Moodle 2.4.3Moodle Moodle 2.2.9Moodle Moodle 2.2.8Moodle Moodle 2.2.7Moodle Moodle 2.2.6Moodle Moodle 2.5.0Moodle Moodle 2.5.2Moodle Moodle 2.4.5Moodle Moodle 2.3.0Moodle Moodle 2.3.5Moodle Moodle 2.3.7Moodle Moodle 2.2.4Moodle Moodle 2.2.2Moodle Moodle 2.1.7Moodle Moodle 2.1.5Moodle Moodle 2.1.1Moodle Moodle 2.0.9Moodle Moodle 2.0.2Moodle Moodle 2.0.0
3.5
CVSSv2
CVE-2013-4523
Cross-site scripting (XSS) vulnerability in message/lib.php in Moodle up to and including 2.2.11, 2.3.x prior to 2.3.10, 2.4.x prior to 2.4.7, and 2.5.x prior to 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted message.
Moodle Moodle 2.5.2Moodle Moodle 2.4.0Moodle Moodle 2.4.5Moodle Moodle 2.3.0Moodle Moodle 2.3.2Moodle Moodle 2.3.7Moodle Moodle 2.2.9Moodle Moodle 2.2.2Moodle Moodle 2.2.10Moodle Moodle 2.1.7Moodle Moodle 2.1.5Moodle Moodle 2.5.1Moodle Moodle 2.4.6Moodle Moodle 2.3.9Moodle Moodle 2.3.1Moodle Moodle 2.3.8Moodle Moodle 2.2.8Moodle Moodle 2.2.3Moodle MoodleMoodle Moodle 2.1.6Moodle Moodle 2.1.4Moodle Moodle 2.0.8
3.5
CVSSv2
CVE-2013-4525
Cross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in Moodle up to and including 2.2.11, 2.3.x prior to 2.3.10, 2.4.x prior to 2.4.7, and 2.5.x prior to 2.5.3 allows remote authenticated users to inject arbitrary web script or HTML via an an...
Moodle Moodle 2.4.6Moodle Moodle 2.4.1Moodle Moodle 2.3.1Moodle Moodle 2.3.3Moodle Moodle 2.3.8Moodle Moodle 2.2.8Moodle Moodle 2.2.6Moodle MoodleMoodle Moodle 2.2.1Moodle Moodle 2.1.4Moodle Moodle 2.1.2Moodle Moodle 2.0.8Moodle Moodle 2.0.6Moodle Moodle 2.0.4Moodle Moodle 1.9.9Moodle Moodle 1.9.7Moodle Moodle 1.9.17Moodle Moodle 1.9.15Moodle Moodle 1.8.8Moodle Moodle 1.8.3Moodle Moodle 1.8.14Moodle Moodle 1.7.6
4.6
CVSSv2
CVE-2013-3630
Moodle up to and including 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
Moodle Moodle 2.5.0Moodle Moodle 2.4.1Moodle Moodle 2.3.8Moodle Moodle 2.3.1Moodle Moodle 2.2.9Moodle Moodle 2.2.2Moodle Moodle 2.2.10Moodle Moodle 2.1.7Moodle Moodle 2.1.5Moodle Moodle 2.0.9Moodle Moodle 2.0.7Moodle Moodle 2.0.0Moodle Moodle 1.9.8Moodle Moodle 1.9.3Moodle Moodle 1.9.18Moodle Moodle 1.9.11Moodle Moodle 1.9.1Moodle Moodle 1.8.4Moodle Moodle 1.8.2Moodle Moodle 1.8.10Moodle Moodle 1.6.7Moodle Moodle 1.6.0
5
CVSSv2
CVE-2013-1830
user/view.php in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.8, 2.3.x prior to 2.3.5, and 2.4.x prior to 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote malicious users to obtain sensitive course-profile information by leveraging the guest ...
Fedoraproject Fedora 18Fedoraproject Fedora 17Moodle Moodle 2.2.4Moodle Moodle 2.2.5Moodle Moodle 2.2.3Moodle Moodle 2.2.1Moodle Moodle 2.2.2Moodle Moodle 2.2.7Moodle Moodle 2.2.6Moodle Moodle 2.2.0Moodle Moodle 2.4.1Moodle Moodle 2.4.0Moodle Moodle 2.3.2Moodle Moodle 2.3.4Moodle Moodle 2.3.1Moodle Moodle 2.3.0Moodle Moodle 2.3.3Moodle Moodle 2.1.5Moodle Moodle 2.1.2Moodle Moodle 2.1.9Moodle Moodle 2.0.3Moodle Moodle 2.0.7
4
CVSSv2
CVE-2013-1834
notes/edit.php in Moodle 1.9.x up to and including 1.9.19, 2.x up to and including 2.1.10, 2.2.x prior to 2.2.8, 2.3.x prior to 2.3.5, and 2.4.x prior to 2.4.2 allows remote authenticated users to reassign notes via a modified (1) userid or (2) courseid field.
Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.12Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.9.17Moodle Moodle 1.9.6Moodle Moodle 1.9.16Moodle Moodle 1.9.7Moodle Moodle 1.9.8Moodle Moodle 1.9.10Moodle Moodle 1.9.13Moodle Moodle 1.9.14Moodle Moodle 1.9.15Moodle Moodle 1.9.4Moodle Moodle 1.9.9Moodle Moodle 1.9.18Moodle Moodle 1.9.19Moodle Moodle 2.0.2Moodle Moodle 2.0.9Moodle Moodle 2.1.4
5
CVSSv2
CVE-2013-1831
lib/setuplib.php in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.8, 2.3.x prior to 2.3.5, and 2.4.x prior to 2.4.2 allows remote malicious users to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message.
Moodle Moodle 2.1.10Moodle Moodle 2.1.5Moodle Moodle 2.1.0Moodle Moodle 2.1.4Moodle Moodle 2.1.2Moodle Moodle 2.0.4Moodle Moodle 2.0.3Moodle Moodle 2.0.5Moodle Moodle 2.0.0Moodle Moodle 1.8.8Moodle Moodle 1.5Moodle Moodle 1.6.3Moodle Moodle 1.3.1Moodle Moodle 1.9.8Moodle Moodle 1.8.14Moodle Moodle 1.5.2Moodle Moodle 1.5.3Moodle Moodle 1.8.7Moodle Moodle 1.9.3Moodle Moodle 1.8.10Moodle Moodle 1.8.9Moodle Moodle 1.9.2
4
CVSSv2
CVE-2012-6098
grade/edit/outcome/edit_form.php in Moodle 1.9.x up to and including 1.9.19, 2.1.x prior to 2.1.10, 2.2.x prior to 2.2.7, 2.3.x prior to 2.3.4, and 2.4.x prior to 2.4.1 does not properly enforce the moodle/grade:manage capability requirement, which allows remote authenticated use...
Moodle Moodle 1.9.16Moodle Moodle 1.9.8Moodle Moodle 1.9.6Moodle Moodle 1.9.12Moodle Moodle 1.9.10Moodle Moodle 1.9.9Moodle Moodle 1.9.17Moodle Moodle 1.9.18Moodle Moodle 1.9.7Moodle Moodle 1.9.15Moodle Moodle 1.9.4Moodle Moodle 1.9.11Moodle Moodle 1.9.2Moodle Moodle 1.9.14Moodle Moodle 1.9.1Moodle Moodle 1.9.3Moodle Moodle 1.9.5Moodle Moodle 1.9.13Moodle Moodle 2.1.0Moodle Moodle 2.1.4Moodle Moodle 2.1.7Moodle Moodle 2.1.8
4
CVSSv2
CVE-2012-3398
Algorithmic complexity vulnerability in Moodle 1.9.x prior to 1.9.19, 2.0.x prior to 2.0.10, 2.1.x prior to 2.1.7, and 2.2.x prior to 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity...
Moodle Moodle 1.9.2Moodle Moodle 1.9.1Moodle Moodle 1.9.6Moodle Moodle 1.9.5Moodle Moodle 2.0.6Moodle Moodle 2.0.5Moodle Moodle 2.1.1Moodle Moodle 2.1.3Moodle Moodle 2.2.2Moodle Moodle 2.2.1Moodle Moodle 1.9.7Moodle Moodle 1.9.15Moodle Moodle 1.9.8Moodle Moodle 1.9.10Moodle Moodle 1.9.14Moodle Moodle 1.9.18Moodle Moodle 2.0.8Moodle Moodle 2.0.1Moodle Moodle 2.1.4Moodle Moodle 2.1.6Moodle Moodle 1.9.11Moodle Moodle 1.9.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook