Search for packages
| purl | pkg:composer/moodle/moodle@3.0.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-fsex-f512-pudv
Aliases: CVE-2016-5013 |
Injection Vulnerability In Moodle, text injection can occur in email headers, potentially leading to outbound spam. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-qtt4-455b-abb6
Aliases: CVE-2016-5014 GHSA-c4cq-v4wp-28hg |
Exposure of Sensitive Information to an Unauthorized Actor In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4kq5-ctsv-eka8 | Improper Access Control The "restore teacher" feature in Moodle allows remote authenticated users to overwrite the course id number. |
CVE-2016-3733
|
| VCID-kgvw-uxf4-wbc1 | Cross-Site Request Forgery (CSRF) A Cross-site request forgery (CSRF) vulnerability in `markposts.php` in Moodle allows remote attackers to hijack the authentication of users for requests that marks forum posts as read. |
CVE-2016-3734
|
| VCID-s3ue-e5h8-f3dy | Improper Access Control The user editing form in Moodle allows remote authenticated users to edit profile fields locked by the administrator. |
CVE-2016-3729
|