Search for packages
| purl | pkg:composer/moodle/moodle@2.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-62wv-866c-rh86
Aliases: CVE-2011-4297 |
Moodle does not properly restrict comment capabilities comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly … | There are no reported fixed by versions. |
|
GHSA-hxmp-8f47-x9fc
Aliases: CVE-2011-4294 |
Moodle Open Redirect Via Error Messages The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before … | There are no reported fixed by versions. |
|
GHSA-4w8m-96v9-2c86
Aliases: CVE-2011-4203 |
Moodle CRLF Injection Vulnerability in Calendar Component CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before … | There are no reported fixed by versions. |
|
GHSA-6xqg-f34f-5fjx
Aliases: CVE-2011-4282 |
Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before … | There are no reported fixed by versions. |
|
GHSA-m3xp-4hf3-qfpp
Aliases: CVE-2011-4283 |
Moodle allows remote attackers to obtain sensitive information Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise … | There are no reported fixed by versions. |
|
GHSA-72gv-qqrp-h9qg
Aliases: CVE-2012-0797 |
Moodle Users Can Bypass Deleted Status The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before … | There are no reported fixed by versions. |
|
GHSA-664q-mrxx-2x2v
Aliases: CVE-2013-1836 |
Moodle does not properly manage privileges for WebDAV repositories Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and … | There are no reported fixed by versions. |
|
GHSA-86v9-gqh9-8268
Aliases: CVE-2011-4286 |
Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before … | There are no reported fixed by versions. |
|
GHSA-89f3-74m6-g27g
Aliases: CVE-2013-1833 |
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module Multiple cross-site scripting (XSS) vulnerabilities in the File Picker … | There are no reported fixed by versions. |
|
GHSA-m97f-x4mr-4x3q
Aliases: CVE-2011-4281 |
Moodle vulnerable to Cross-Site Request Forgery Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers … | There are no reported fixed by versions. |
|
GHSA-8vjj-wf73-w882
Aliases: CVE-2011-4285 |
Moodle Incorrect Default Settings The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the `moodle/course:delete` capability, … | There are no reported fixed by versions. |
|
GHSA-fhgh-fjh9-vq62
Aliases: CVE-2011-4292 |
Moodle allows remote authenticated users to cause a denial of service (invalid database records) Moodle 2.0.x before 2.0.3 allows remote … | There are no reported fixed by versions. |
|
GHSA-mw6p-49jf-9935
Aliases: CVE-2011-4284 |
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page Moodle 2.0.x before 2.0.2 allows … | There are no reported fixed by versions. |
|
GHSA-jcrj-gmr6-p5j8
Aliases: CVE-2011-4301 |
Moodle Allows Modification of Constants The `MoodleQuickForm` class in the Forms Library in `lib/formslib.php` in Moodle 1.9.x before 1.9.14, 2.0.x … | There are no reported fixed by versions. |
|
GHSA-cc94-hwj3-rf65
Aliases: CVE-2013-1835 |
Moodle's login_as feature leaks information from external repositories Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … | There are no reported fixed by versions. |
|
GHSA-phqj-xp48-7p7c
Aliases: CVE-2011-4279 |
Moodle does not use the forceloginforprofiles setting for course-profiles access control Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles … | There are no reported fixed by versions. |
|
GHSA-h6px-pvfh-q2jv
Aliases: CVE-2011-4299 |
Moodle vulnerable to Cross-Site Scripting Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 … | There are no reported fixed by versions. |
|
GHSA-6656-6qwx-4c2m
Aliases: CVE-2011-4278 |
Moodle XSS In Tag Autocomplete functionality Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 … | There are no reported fixed by versions. |
|
GHSA-m2pf-4pf8-45j2
Aliases: CVE-2011-4291 |
Moodle allows remote authenticated users to cause a denial of service (invalid database records) Moodle 2.0.x before 2.0.3 allows remote … | There are no reported fixed by versions. |
|
GHSA-pgp5-rcwp-qvfg
Aliases: CVE-2013-1832 |
Moodle includes the WebDAV password in the configuration form repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before … | There are no reported fixed by versions. |
|
GHSA-wxvp-8q8h-r6rr
Aliases: CVE-2011-4293 |
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory The theme implementation in Moodle 2.0.x before 2.0.4 and … | There are no reported fixed by versions. |
|
GHSA-3qg4-2fcm-c8f9
Aliases: CVE-2011-4289 |
Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members Moodle 2.0.x before 2.0.3 does … | There are no reported fixed by versions. |
|
GHSA-mx5g-3vxh-rgm8
Aliases: CVE-2011-4280 |
Moodle vulnerable to XSS via bundled spikephpcoverage library Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as … | There are no reported fixed by versions. |
|
GHSA-8hxm-42v5-66hm
Aliases: CVE-2011-4298 |
Moodle vulnerable to Cross-Site Request Forgery Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 … | There are no reported fixed by versions. |
|
GHSA-9p54-pc88-36c4
Aliases: CVE-2011-4300 |
Moodle does not properly restrict access to category and course data The `file_browser` component in Moodle 2.0.x before 2.0.5 and … | There are no reported fixed by versions. |
|
GHSA-j3x5-cwfj-pfcw
Aliases: CVE-2011-4287 |
Moodle does not force password changes for autosubscribed users admin/uploaduser_form.php in Moodle 2.0.x before 2.0.3 does not force password changes … | There are no reported fixed by versions. |
|
CVE-2013-1833
Aliases: GHSA-89f3-74m6-g27g |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-2x36-7xfm-pgm7
Aliases: CVE-2012-1157 |
Moodle default permissions too permissive Moodle before 2.2.2 default settings allowed all repositories to be viewable by all authenticated users. | There are no reported fixed by versions. |
|
GHSA-358r-g2xw-7c83
Aliases: CVE-2012-1156 |
Moodle backs up private files Moodle before 2.2.2, 2.1.5, and 2.0.8 had users' private files included in course backups unnecessarily. | There are no reported fixed by versions. |
|
GHSA-p9hr-f4xj-8w8r
Aliases: CVE-2012-1159 |
Moodle included private user files in course backups Moodle before 2.2.2 is vulnerable to information disclosure because course backups were … | There are no reported fixed by versions. |