Search for packages
| purl | pkg:composer/moodle/moodle@1.8.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-966m-m549-2878
Aliases: CVE-2010-1616 |
Moodle is vulnerable to unauthorized new accounts creation Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring … | There are no reported fixed by versions. |
|
GHSA-q53j-c866-h9mw
Aliases: CVE-2010-1617 |
Moodle doesn't properly check role user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a … | There are no reported fixed by versions. |
|
GHSA-j5rc-cr5w-vfg6
Aliases: CVE-2010-1613 |
Moodle Session Fixation vulnerability Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting … | There are no reported fixed by versions. |
|
GHSA-hhxf-w8hj-43w6
Aliases: CVE-2010-1619 |
Moodle vulnerable to Cross-site Scripting Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library … | There are no reported fixed by versions. |
|
GHSA-9xp2-5fr9-7mwm
Aliases: CVE-2010-1615 |
Moodle vulnerable to SQL injection Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote … | There are no reported fixed by versions. |
|
GHSA-x7r4-26m9-hmgq
Aliases: CVE-2008-5153 |
Moodle vulnerable to symlink attack `spell-check-logic.cgi` in Moodle 1.9 before 1.9.4, 1.8 before 1.8.8, 1.7 before 1.7.7 and 1.6 before … | There are no reported fixed by versions. |
|
GHSA-45ch-hxgr-vx8j
Aliases: CVE-2010-1618 |
phpCAS client library and Moodle Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as … | There are no reported fixed by versions. |
|
GHSA-5fgv-cvr8-xg48
Aliases: CVE-2010-1614 |
Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow … | There are no reported fixed by versions. |