Search for packages
| purl | pkg:composer/moodle/moodle@1.9.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-966m-m549-2878
Aliases: CVE-2010-1616 |
Moodle is vulnerable to unauthorized new accounts creation Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring … | There are no reported fixed by versions. |
|
GHSA-7cvw-wrj9-q5fp
Aliases: CVE-2011-4133 |
Moodle vulnerable to Cross-Site Request Forgery Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to … | There are no reported fixed by versions. |
|
GHSA-3gm8-32vv-q8mp
Aliases: CVE-2010-2230 |
Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter The KSES text cleaning filter in lib/weblib.php in Moodle before … | There are no reported fixed by versions. |
|
GHSA-q53j-c866-h9mw
Aliases: CVE-2010-1617 |
Moodle doesn't properly check role user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a … | There are no reported fixed by versions. |
|
GHSA-hhxf-w8hj-43w6
Aliases: CVE-2010-1619 |
Moodle vulnerable to Cross-site Scripting Cross-site scripting (XSS) vulnerability in the fix_non_standard_entities function in the KSES HTML text cleaning library … | There are no reported fixed by versions. |
|
GHSA-9xp2-5fr9-7mwm
Aliases: CVE-2010-1615 |
Moodle vulnerable to SQL injection Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote … | There are no reported fixed by versions. |
|
GHSA-m3xp-4hf3-qfpp
Aliases: CVE-2011-4283 |
Moodle allows remote attackers to obtain sensitive information Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise … | There are no reported fixed by versions. |
|
GHSA-86v9-gqh9-8268
Aliases: CVE-2011-4286 |
Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before … | There are no reported fixed by versions. |
|
GHSA-x7r4-26m9-hmgq
Aliases: CVE-2008-5153 |
Moodle vulnerable to symlink attack `spell-check-logic.cgi` in Moodle 1.9 before 1.9.4, 1.8 before 1.8.8, 1.7 before 1.7.7 and 1.6 before … | There are no reported fixed by versions. |
|
GHSA-45ch-hxgr-vx8j
Aliases: CVE-2010-1618 |
phpCAS client library and Moodle Cross-site Scripting vulnerability Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as … | There are no reported fixed by versions. |
|
GHSA-prrh-679x-79qh
Aliases: CVE-2013-1834 |
Moodle allows remote authenticated users to reassign notes notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, … | There are no reported fixed by versions. |
|
GHSA-5fgv-cvr8-xg48
Aliases: CVE-2010-1614 |
Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow … | There are no reported fixed by versions. |