Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 2.8.12 vulnerabilities and exploits

(subscribe to this query)
5.4
CVSSv3
CVE-2016-5014
In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.
Moodle Moodle 3.1.0Moodle Moodle 3.0.4Moodle Moodle 2.8.0Moodle Moodle 2.8.1Moodle Moodle 2.8.2Moodle Moodle 2.8.3Moodle Moodle 2.9.5Moodle Moodle 2.9.4Moodle Moodle 2.9.3Moodle Moodle 2.9.2Moodle Moodle 2.8.8Moodle Moodle 2.8.9Moodle Moodle 2.8.10Moodle Moodle 3.0.2Moodle Moodle 3.0.0Moodle Moodle 2.9.0Moodle Moodle 2.8.11Moodle Moodle 2.8.4Moodle Moodle 2.8.6Moodle Moodle 3.0.3Moodle Moodle 3.0.1Moodle Moodle 2.9.6
5.4
CVSSv3
CVE-2016-5013
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
Moodle Moodle 3.0.4Moodle Moodle 3.0.3Moodle Moodle 3.0.0Moodle Moodle 3.0.1Moodle Moodle 2.8.5Moodle Moodle 2.8.6Moodle Moodle 2.8.7Moodle Moodle 2.8.8Moodle Moodle 2.9.2Moodle Moodle 2.9.0Moodle Moodle 2.8.12Moodle Moodle 2.8.11Moodle Moodle 2.9.5Moodle Moodle 2.9.4Moodle Moodle 2.9.1Moodle Moodle 2.8.0Moodle Moodle 2.8.2Moodle Moodle 2.8.4Moodle Moodle 2.8.9Moodle MoodleMoodle Moodle 2.9.6Moodle Moodle 3.1.0
7.3
CVSSv3
CVE-2016-7038
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
Moodle Moodle 2.9.7Moodle Moodle 2.9.6Moodle Moodle 2.9.5Moodle Moodle 2.9.4Moodle Moodle 2.9.3Moodle Moodle 2.8.7Moodle Moodle 2.8.8Moodle Moodle 2.8.9Moodle Moodle 2.8.10Moodle Moodle 3.1.1Moodle Moodle 3.1.0Moodle Moodle 3.0.5Moodle Moodle 3.0.4Moodle Moodle 2.8.11Moodle Moodle 2.8.0Moodle Moodle 2.8.1Moodle Moodle 2.8.2Moodle Moodle 3.0.0Moodle Moodle 3.0.2Moodle Moodle 2.9.2Moodle Moodle 2.8.12Moodle Moodle 2.8.3
4.3
CVSSv3
CVE-2016-8643
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.
Moodle Moodle 2.9.5Moodle Moodle 2.9.4Moodle Moodle 2.9.3Moodle Moodle 2.9.1Moodle Moodle 2.8.8Moodle Moodle 2.8.9Moodle Moodle 2.8.10Moodle MoodleMoodle Moodle 3.0.5Moodle Moodle 3.0.4Moodle Moodle 3.0.3Moodle Moodle 3.0.0Moodle Moodle 2.8.0Moodle Moodle 2.8.1Moodle Moodle 2.8.2Moodle Moodle 2.8.3Moodle Moodle 3.1.2Moodle Moodle 3.1.0Moodle Moodle 3.0.2Moodle Moodle 2.9.7Moodle Moodle 2.9.0Moodle Moodle 2.8.11
5.3
CVSSv3
CVE-2016-8644
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
Moodle Moodle 3.1.2Moodle Moodle 3.1.1Moodle Moodle 3.1.0Moodle Moodle 3.0.6Moodle Moodle 2.9.1Moodle Moodle 2.9.2Moodle Moodle 2.9.0Moodle Moodle 2.8.12Moodle Moodle 3.0.1Moodle Moodle 3.0.2Moodle Moodle 2.9.8Moodle Moodle 2.9.7Moodle Moodle 2.8.4Moodle Moodle 2.8.5Moodle Moodle 2.8.6Moodle Moodle 2.8.7Moodle Moodle 3.0.4Moodle Moodle 3.0.0Moodle Moodle 2.9.6Moodle Moodle 2.9.4Moodle Moodle 2.8.0Moodle Moodle 2.8.2
5.3
CVSSv3
CVE-2016-8642
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
Moodle Moodle 3.0.2Moodle Moodle 2.9.8Moodle Moodle 2.9.7Moodle Moodle 2.9.6Moodle Moodle 2.8.5Moodle Moodle 2.8.6Moodle Moodle 2.8.7Moodle Moodle 2.8.8Moodle Moodle 3.1.1Moodle Moodle 3.1.0Moodle Moodle 3.0.6Moodle Moodle 3.0.5Moodle Moodle 2.9.2Moodle Moodle 2.9.0Moodle Moodle 2.8.12Moodle Moodle 2.8.11Moodle Moodle 2.8.0Moodle Moodle 3.1.2Moodle Moodle 3.0.4Moodle Moodle 3.0.0Moodle Moodle 2.9.4Moodle Moodle 2.9.1
5.3
CVSSv3
CVE-2017-2576
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
Moodle Moodle 3.1.1Moodle Moodle 3.1.0Moodle Moodle 3.0.6Moodle Moodle 3.0.5Moodle Moodle 2.9.2Moodle Moodle 2.9.0Moodle Moodle 2.8.12Moodle Moodle 2.8.11Moodle Moodle 3.0.2Moodle Moodle 2.9.9Moodle Moodle 2.9.8Moodle Moodle 2.9.7Moodle Moodle 2.9.6Moodle Moodle 2.8.4Moodle Moodle 2.8.5Moodle Moodle 2.8.6Moodle Moodle 2.8.7Moodle Moodle 3.0.7Moodle Moodle 3.2.0Moodle Moodle 3.0.3Moodle Moodle 3.0.1Moodle Moodle 2.9.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook