Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 2.7.9 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv3
CVE-2015-5272
The Forum module in Moodle 2.7.x prior to 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."
Moodle Moodle 2.7.7Moodle Moodle 2.7.6Moodle Moodle 2.7.3Moodle Moodle 2.7.2Moodle Moodle 2.7.5Moodle Moodle 2.7.4Moodle Moodle 2.7.9Moodle Moodle 2.7.8Moodle Moodle 2.7.1Moodle Moodle 2.7.0
6.1
CVSSv3
CVE-2015-3275
Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.9, 2.8.x prior to 2.8.7, and 2.9.x prior to 2.9.1 allow remote malicious users to inject arbitrary web script or HTML via a crafted organization name t...
Moodle Moodle 2.9.0Moodle Moodle 2.8.7Moodle Moodle 2.8.0Moodle Moodle 2.7.9Moodle Moodle 2.7.8Moodle Moodle 2.7.1Moodle Moodle 2.7.0Moodle Moodle 2.8.4Moodle Moodle 2.8.3Moodle Moodle 2.7.5Moodle Moodle 2.7.4Moodle Moodle 2.9.1Moodle Moodle 2.8.2Moodle Moodle 2.8.1Moodle Moodle 2.7.3Moodle Moodle 2.7.2Moodle Moodle 2.8.6Moodle Moodle 2.8.5Moodle Moodle 2.7.7Moodle Moodle 2.7.6Moodle Moodle
5.4
CVSSv3
CVE-2015-5264
The lesson module in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, and 2.9.x prior to 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role.
Moodle Moodle 2.8.6Moodle Moodle 2.8.5Moodle Moodle 2.7.7Moodle Moodle 2.7.6Moodle MoodleMoodle Moodle 2.9.1Moodle Moodle 2.8.2Moodle Moodle 2.8.1Moodle Moodle 2.7.3Moodle Moodle 2.7.2Moodle Moodle 2.9.0Moodle Moodle 2.8.7Moodle Moodle 2.8.0Moodle Moodle 2.7.9Moodle Moodle 2.7.8Moodle Moodle 2.7.1Moodle Moodle 2.7.0Moodle Moodle 2.8.4Moodle Moodle 2.8.3Moodle Moodle 2.7.5Moodle Moodle 2.7.4
4.3
CVSSv3
CVE-2015-5265
The wiki component in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, and 2.9.x prior to 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing file management, which allows remote authenticated users to delete arbitrary fil...
Moodle Moodle 2.8.4Moodle Moodle 2.8.3Moodle Moodle 2.7.5Moodle Moodle 2.7.4Moodle Moodle 2.9.0Moodle Moodle 2.8.7Moodle Moodle 2.8.0Moodle Moodle 2.7.9Moodle Moodle 2.7.8Moodle Moodle 2.7.1Moodle Moodle 2.7.0Moodle Moodle 2.8.6Moodle Moodle 2.8.5Moodle Moodle 2.7.7Moodle Moodle 2.7.6Moodle MoodleMoodle Moodle 2.9.1Moodle Moodle 2.8.2Moodle Moodle 2.8.1Moodle Moodle 2.7.3Moodle Moodle 2.7.2
6.8
CVSSv3
CVE-2015-5266
The enrol_meta_sync function in enrol/meta/locallib.php in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, and 2.9.x prior to 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrec...
Moodle Moodle 2.9.1Moodle Moodle 2.8.2Moodle Moodle 2.8.1Moodle Moodle 2.7.4Moodle Moodle 2.7.3Moodle Moodle 2.8.6Moodle Moodle 2.8.5Moodle Moodle 2.7.8Moodle Moodle 2.7.7Moodle Moodle 2.7.0Moodle MoodleMoodle Moodle 2.9.0Moodle Moodle 2.8.7Moodle Moodle 2.8.0Moodle Moodle 2.7.9Moodle Moodle 2.7.2Moodle Moodle 2.7.1Moodle Moodle 2.8.4Moodle Moodle 2.8.3Moodle Moodle 2.7.6Moodle Moodle 2.7.5
7.5
CVSSv3
CVE-2015-5267
lib/moodlelib.php in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, and 2.9.x prior to 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string functions, which makes it easier for remote malicious users to...
Moodle Moodle 2.9.1Moodle Moodle 2.9.0Moodle Moodle 2.8.1Moodle Moodle 2.8.0Moodle Moodle 2.7.2Moodle Moodle 2.7.1Moodle Moodle 2.8.5Moodle Moodle 2.8.4Moodle Moodle 2.7.6Moodle Moodle 2.7.5Moodle Moodle 2.8.3Moodle Moodle 2.8.2Moodle Moodle 2.7.4Moodle Moodle 2.7.3Moodle Moodle 2.8.7Moodle Moodle 2.8.6Moodle Moodle 2.7.9Moodle Moodle 2.7.8Moodle Moodle 2.7.7Moodle Moodle 2.7.0Moodle Moodle
4.3
CVSSv3
CVE-2015-5268
The rating component in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, and 2.9.x prior to 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value.
Moodle Moodle 2.8.3Moodle Moodle 2.8.2Moodle Moodle 2.7.5Moodle Moodle 2.7.4Moodle Moodle 2.8.7Moodle Moodle 2.8.6Moodle Moodle 2.7.9Moodle Moodle 2.7.8Moodle Moodle 2.7.1Moodle Moodle 2.7.0Moodle Moodle 2.8.5Moodle Moodle 2.8.4Moodle Moodle 2.7.7Moodle Moodle 2.7.6Moodle MoodleMoodle Moodle 2.9.1Moodle Moodle 2.9.0Moodle Moodle 2.8.1Moodle Moodle 2.8.0Moodle Moodle 2.7.3Moodle Moodle 2.7.2
5.4
CVSSv3
CVE-2015-5269
Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, and 2.9.x prior to 2.9.2 allows remote authenticated users to inject arbitrary web script or HTML via a modified grouping description.
Moodle Moodle 2.9.1Moodle Moodle 2.9.0Moodle Moodle 2.8.7Moodle Moodle 2.8.0Moodle Moodle 2.7.9Moodle Moodle 2.7.2Moodle Moodle 2.7.1Moodle Moodle 2.8.4Moodle Moodle 2.8.3Moodle Moodle 2.7.6Moodle Moodle 2.7.5Moodle Moodle 2.8.2Moodle Moodle 2.8.1Moodle Moodle 2.7.4Moodle Moodle 2.7.3Moodle Moodle 2.8.6Moodle Moodle 2.8.5Moodle Moodle 2.7.8Moodle Moodle 2.7.7Moodle Moodle 2.7.0Moodle Moodle
4.3
CVSSv3
CVE-2015-5335
Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.11, 2.8.x prior to 2.8.9, and 2.9.x prior to 2.9.3 allows remote malicious users to hijack the authentication of administrators for requests...
Moodle Moodle 2.8.4Moodle Moodle 2.8.3Moodle Moodle 2.8.2Moodle Moodle 2.8.1Moodle Moodle 2.9.2Moodle Moodle 2.9.1Moodle Moodle 2.9.0Moodle Moodle 2.7.5Moodle Moodle 2.7.4Moodle Moodle 2.7.3Moodle Moodle 2.7.2Moodle Moodle 2.8.8Moodle Moodle 2.8.6Moodle Moodle 2.7.9Moodle Moodle 2.7.7Moodle Moodle 2.7.1Moodle MoodleMoodle Moodle 2.8.7Moodle Moodle 2.8.5Moodle Moodle 2.8.0Moodle Moodle 2.7.8Moodle Moodle 2.7.6
5.4
CVSSv3
CVE-2015-5336
Multiple cross-site scripting (XSS) vulnerabilities in the survey module in Moodle up to and including 2.6.11, 2.7.x prior to 2.7.11, 2.8.x prior to 2.8.9, and 2.9.x prior to 2.9.3 allow remote authenticated users to inject arbitrary web script or HTML by leveraging the student r...
Moodle Moodle 2.8.0Moodle Moodle 2.7.9Moodle Moodle 2.7.8Moodle Moodle 2.7.7Moodle Moodle 2.9.1Moodle Moodle 2.9.0Moodle Moodle 2.8.7Moodle Moodle 2.8.6Moodle Moodle 2.8.5Moodle Moodle 2.7.2Moodle Moodle 2.7.1Moodle Moodle 2.7.0Moodle MoodleMoodle Moodle 2.8.8Moodle Moodle 2.8.4Moodle Moodle 2.8.2Moodle Moodle 2.7.5Moodle Moodle 2.7.3Moodle Moodle 2.7.10Moodle Moodle 2.9.2Moodle Moodle 2.8.3Moodle Moodle 2.8.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook