Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
moodle moodle 1.8.9 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2009-4300
Multiple unspecified authentication plugins in Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for malicious users to obtain credentials via ...
Moodle Moodle 1.8.1
Moodle Moodle 1.8.2
Moodle Moodle 1.9.5
Moodle Moodle 1.9.6
Moodle Moodle 1.8.4
Moodle Moodle 1.8.7
Moodle Moodle 1.9.1
Moodle Moodle 1.9.3
Moodle Moodle 1.8.8
Moodle Moodle 1.8.9
Moodle Moodle 1.8.10
Moodle Moodle 1.8.3
Moodle Moodle 1.8.5
Moodle Moodle 1.9.2
Moodle Moodle 1.9.4
6
CVSSv2
CVE-2009-4301
mnet/lib.php in Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.
Moodle Moodle 1.8.1
Moodle Moodle 1.8.2
Moodle Moodle 1.8.3
Moodle Moodle 1.8.4
Moodle Moodle 1.8.7
Moodle Moodle 1.9.3
Moodle Moodle 1.9.5
Moodle Moodle 1.8.9
Moodle Moodle 1.8.10
Moodle Moodle 1.9.1
Moodle Moodle 1.8.5
Moodle Moodle 1.8.8
Moodle Moodle 1.9.2
Moodle Moodle 1.9.4
Moodle Moodle 1.9.6
6.8
CVSSv2
CVE-2009-4297
Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 allow remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Moodle Moodle 1.8.7
Moodle Moodle 1.8.8
Moodle Moodle 1.8.9
Moodle Moodle 1.8.10
Moodle Moodle 1.8.3
Moodle Moodle 1.8.5
Moodle Moodle 1.9.2
Moodle Moodle 1.9.4
Moodle Moodle 1.8.1
Moodle Moodle 1.9.5
Moodle Moodle 1.9.6
Moodle Moodle 1.8.2
Moodle Moodle 1.8.4
Moodle Moodle 1.9.1
Moodle Moodle 1.9.3
5
CVSSv2
CVE-2009-4298
The LAMS module (mod/lams) for Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows malicious users to obtain user account information via unknown vectors.
Moodle Moodle 1.8.4
Moodle Moodle 1.8.5
Moodle Moodle 1.8.7
Moodle Moodle 1.8.8
Moodle Moodle 1.8.1
Moodle Moodle 1.8.3
Moodle Moodle 1.8.9
Moodle Moodle 1.9.2
Moodle Moodle 1.9.3
Moodle Moodle 1.9.4
Moodle Moodle 1.9.5
Moodle Moodle 1.8.2
Moodle Moodle 1.8.10
Moodle Moodle 1.9.1
Moodle Moodle 1.9.6
6.5
CVSSv2
CVE-2009-4305
SQL injection vulnerability in the SCORM module in Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."
Moodle Moodle 1.8.2
Moodle Moodle 1.8.3
Moodle Moodle 1.8.4
Moodle Moodle 1.8.5
Moodle Moodle 1.8.7
Moodle Moodle 1.8.1
Moodle Moodle 1.8.9
Moodle Moodle 1.9.5
Moodle Moodle 1.9.1
Moodle Moodle 1.9.2
Moodle Moodle 1.9.3
Moodle Moodle 1.9.4
Moodle Moodle 1.8.8
Moodle Moodle 1.8.10
Moodle Moodle 1.9.6
5
CVSSv2
CVE-2009-4302
login/index_form.html in Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote malicious ...
Moodle Moodle 1.8.3
Moodle Moodle 1.8.4
Moodle Moodle 1.8.5
Moodle Moodle 1.8.7
Moodle Moodle 1.8.8
Moodle Moodle 1.9.2
Moodle Moodle 1.9.3
Moodle Moodle 1.9.4
Moodle Moodle 1.9.5
Moodle Moodle 1.8.1
Moodle Moodle 1.8.9
Moodle Moodle 1.8.2
Moodle Moodle 1.8.10
Moodle Moodle 1.9.1
Moodle Moodle 1.9.6
5
CVSSv2
CVE-2009-4303
Moodle 1.8 prior to 1.8.11 and 1.9 prior to 1.9.7 stores (1) password hashes and (2) unspecified "secrets" in backup files, which might allow malicious users to obtain sensitive information.
Moodle Moodle 1.8.1
Moodle Moodle 1.8.2
Moodle Moodle 1.8.3
Moodle Moodle 1.8.4
Moodle Moodle 1.8.7
Moodle Moodle 1.8.9
Moodle Moodle 1.9.5
Moodle Moodle 1.8.10
Moodle Moodle 1.9.1
Moodle Moodle 1.9.2
Moodle Moodle 1.9.3
Moodle Moodle 1.8.5
Moodle Moodle 1.8.8
Moodle Moodle 1.9.4
Moodle Moodle 1.9.6
4.3
CVSSv2
CVE-2009-1171
The TeX filter in Moodle 1.6 prior to 1.6.9+, 1.7 prior to 1.7.7+, 1.8 prior to 1.8.9, and 1.9 prior to 1.9.5 allows user-assisted malicious users to read arbitrary files via an input command in a "$$" sequence, which causes LaTeX to include the contents of the file.
Moodle Moodle 1.6.4
Moodle Moodle 1.6.1
Moodle Moodle 1.7.1
Moodle Moodle 1.8.5
Moodle Moodle 1.8.4
Moodle Moodle 1.9.3
Moodle Moodle 1.6.7
Moodle Moodle 1.6.8
Moodle Moodle 1.7.6
Moodle Moodle 1.8.2
Moodle Moodle 1.8.1
Moodle Moodle 1.8.8
Moodle Moodle 1.9.4
Moodle Moodle 1.6.3
Moodle Moodle 1.6.5
Moodle Moodle 1.6.0
Moodle Moodle 1.7.4
Moodle Moodle 1.7.5
Moodle Moodle 1.8.3
Moodle Moodle 1.8.6
Moodle Moodle 1.9.2
Moodle Moodle 1.9.1
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3