Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2009-0502

Published: 10/02/2009 Updated: 01/12/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Snoopy

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 prior to 1.6.9, 1.7 prior to 1.7.7, 1.8 prior to 1.8.8, and 1.9 prior to 1.9.4, allows remote malicious users to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the "Login as" feature is used to visit a MyMoodle or Blog page.

Vulnerable Product Search on Vulmon Subscribe to Product

snoopy snoopy 1.2.3

moodle moodle 1.7.4

moodle moodle 1.7.5

moodle moodle 1.8.5

moodle moodle 1.9.2

moodle moodle 1.7.0

moodle moodle 1.7.1

moodle moodle 1.8.2

moodle moodle 1.8.3

moodle moodle 1.8.7

moodle moodle 1.9.3

moodle moodle 1.7.2

moodle moodle 1.7.3

moodle moodle 1.8.4

moodle moodle 1.8.6

moodle moodle 1.7.6

moodle moodle 1.8.1

moodle moodle 1.9.1

Vendor Advisories

Ubuntu Security Notice: moodle vulnerabilities
Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user (CVE-2007-3215) ...
Debian Security Advisories: DSA-1724-1 moodle -- several vulnerabilities
Several vulnerabilities have been discovered in Moodle, an online course management system The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0500 It was discovered that the information stored in the log tables was not properly sanitized, which could allow attackers to inject arbitrary web cod ...

References

CWE-79http://www.openwall.com/lists/oss-security/2009/02/04/1http://moodle.org/security/http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.htmlhttp://secunia.com/advisories/34418http://www.debian.org/security/2009/dsa-1724http://secunia.com/advisories/33955https://usn.ubuntu.com/791-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook