Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

moodle moodle 3.10.0 vulnerabilities and exploits

(subscribe to this query)
9
CVSSv2
CVE-2021-21809
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities.
Moodle Moodle 3.10.0
5
CVSSv2
CVE-2021-20185
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages.
Moodle MoodleMoodle Moodle 3.10.0
6.5
CVSSv2
CVE-2021-20187
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication.
Moodle MoodleMoodle Moodle 3.10.0
4.6
CVSSv2
CVE-2013-3630
Moodle up to and including 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
Moodle Moodle 2.5.0Moodle Moodle 2.4.1Moodle Moodle 2.3.8Moodle Moodle 2.3.1Moodle Moodle 2.2.9Moodle Moodle 2.2.2Moodle Moodle 2.2.10Moodle Moodle 2.1.7Moodle Moodle 2.1.5Moodle Moodle 2.0.9Moodle Moodle 2.0.7Moodle Moodle 2.0.0Moodle Moodle 1.9.8Moodle Moodle 1.9.3Moodle Moodle 1.9.18Moodle Moodle 1.9.11Moodle Moodle 1.9.1Moodle Moodle 1.8.4Moodle Moodle 1.8.2Moodle Moodle 1.8.10Moodle Moodle 1.6.7Moodle Moodle 1.6.0
4.3
CVSSv2
CVE-2013-4942
Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 up to and including 3.9.1, as used in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.11, 2.3.x prior to 2.3.8, 2.4.x prior to 2.4.5, 2.5.x prior to 2.5.1, and other ...
Moodle Moodle 2.1.4Moodle Moodle 2.1.6Moodle Moodle 2.1.0Yahoo Yui 3.5.0Yahoo Yui 3.8.0Yahoo Yui 3.9.0Moodle Moodle 2.2.8Moodle Moodle 2.2.4Moodle Moodle 2.2.6Moodle Moodle 2.5.0Moodle Moodle 2.3.1Moodle Moodle 2.3.7Moodle Moodle 2.1.10Yahoo Yui 3.6.0Yahoo Yui 3.7.0Yahoo Yui 3.7.1Yahoo Yui 3.7.2Yahoo Yui 3.7.3Moodle Moodle 2.2.10Moodle Moodle 2.2.0Moodle Moodle 2.2.9Moodle Moodle 2.2.7
4.3
CVSSv2
CVE-2013-4939
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 up to and including 3.9.1, as used in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.11, 2.3.x prior to 2.3.8, 2.4.x prior to 2.4.5, 2.5.x prior to 2.5.1, and other products,...
Yahoo Yui 3.8.0Moodle Moodle 2.3.4Yahoo Yui 3.5.0Moodle Moodle 2.2.2Yahoo Yui 3.8.1Yahoo Yui 3.6.0Yahoo Yui 3.1.0Moodle Moodle 2.3.1Moodle Moodle 2.4.3Moodle Moodle 2.4.1Yahoo Yui 3.7.0Moodle Moodle 2.2.9Moodle Moodle 2.1.2Moodle Moodle 2.4.2Moodle Moodle 2.2.6Yahoo Yui 3.10.0Yahoo Yui 3.2.0Yahoo Yui 3.7.2Moodle Moodle 2.3.6Yahoo Yui 3.9.0Moodle Moodle 2.1.10Moodle Moodle 2.1.8
4.3
CVSSv2
CVE-2013-4940
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.11, 2.3.x prior to 2.3.8, 2.4.x prior to 2.4.5, 2.5.x prior to 2.5.1, and other products, allows remote malicious ...
Moodle Moodle 2.1.1Moodle Moodle 2.1.3Yahoo Yui 3.1.2Yahoo Yui 3.3.0Yahoo Yui 3.6.0Yahoo Yui 3.7.1Yahoo Yui 3.10.0Yahoo Yui 3.10.2Moodle Moodle 2.2.0Moodle Moodle 2.2.7Moodle Moodle 2.4.4Moodle Moodle 2.4.2Moodle Moodle 2.3.5Moodle Moodle 2.3.3Moodle Moodle 2.3.4Moodle Moodle 2.1.10Moodle Moodle 2.1.5Moodle Moodle 2.1.4Moodle Moodle 2.1.2Moodle Moodle 2.1.6Yahoo Yui 3.4.0Yahoo Yui 3.4.1
4.3
CVSSv2
CVE-2013-4941
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 up to and including 3.9.1, as used in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.11, 2.3.x prior to 2.3.8, 2.4.x prior to 2.4.5, 2.5.x prior to 2.5.1, and other produ...
Moodle Moodle 2.1.8Moodle Moodle 2.1.0Moodle Moodle 2.1.9Yahoo Yui 3.0.0Yahoo Yui 3.7.3Yahoo Yui 3.8.0Yahoo Yui 3.8.1Yahoo Yui 3.9.0Moodle Moodle 2.2.6Moodle Moodle 2.2.5Moodle Moodle 2.5.0Moodle Moodle 2.4.0Moodle Moodle 2.1.10Moodle Moodle 2.1.5Moodle Moodle 2.1.4Moodle Moodle 2.1.2Yahoo Yui 3.3.0Yahoo Yui 3.4.0Yahoo Yui 3.4.1Yahoo Yui 3.5.0Yahoo Yui 3.5.1Moodle Moodle 2.2.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook