Search for packages
| purl | pkg:composer/moodle/moodle@2.1.10 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6spt-ggnj-zber
Aliases: CVE-2013-2083 GHSA-m63h-q4x3-6hwj |
Improper Input Validation The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request. |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability.
This version is affected by these other vulnerabilities:
Affected by 231 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 234 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-9tcy-uad5-hyb8
Aliases: CVE-2013-1831 GHSA-xr24-jp5c-6c4v |
Exposure of Sensitive Information to an Unauthorized Actor lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message. |
Affected by 0 other vulnerabilities. Affected by 235 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 238 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-akut-458d-6bee
Aliases: CVE-2013-1830 GHSA-8r7x-qq55-74v2 |
Moodle does not enforce the forceloginforprofiles setting user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search. |
Affected by 0 other vulnerabilities. Affected by 235 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 238 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-era2-gy4n-6kdx
Aliases: CVE-2013-1833 GHSA-89f3-74m6-g27g |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted filename. |
Affected by 0 other vulnerabilities. Affected by 235 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 238 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
|
VCID-f6mk-8r56-1yfe
Aliases: CVE-2013-1832 GHSA-pgp5-rcwp-qvfg |
Exposure of Sensitive Information to an Unauthorized Actor repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 includes the WebDAV password in the configuration form, which allows remote authenticated administrators to obtain sensitive information by configuring an instance. |
Affected by 0 other vulnerabilities. Affected by 235 other vulnerabilities.
This version is affected by these other vulnerabilities:
Affected by 238 other vulnerabilities.
This version is affected by these other vulnerabilities:
|
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||