Search for packages
| purl | pkg:composer/moodle/moodle@3.2.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2qjr-wjh1-8fh6
Aliases: CVE-2017-2643 |
Information Exposure In Moodle global search displays user names for unauthenticated users. |
Affected by 4 other vulnerabilities. |
|
VCID-dhku-uah4-ykh8
Aliases: CVE-2017-2641 |
SQL Injection An SQL injection can occur via user preferences. |
Affected by 4 other vulnerabilities. |
|
VCID-jn5n-6hg9-tyf7
Aliases: CVE-2017-2644 |
Cross-site Scripting An XSS can occur via evidence of prior learning. |
Affected by 4 other vulnerabilities. |
|
VCID-x927-nh46-7fdy
Aliases: CVE-2017-2645 |
Cross-site Scripting In Moodle, an XSS can occur via attachments to evidence of prior learning. |
Affected by 4 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-65y9-9ur2-pugc | Improper Input Validation There is incorrect sanitization of attributes in forums. |
CVE-2017-2576
|
| VCID-e2zc-7ujn-wybu | Cross-site Scripting There is XSS in the assignment submission page. |
CVE-2017-2578
|