Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/moodle/moodle@2.0.2
purl pkg:composer/moodle/moodle@2.0.2
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (10)

Advisory Summary Aliases
GHSA-6xqg-f34f-5fjx
Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before … CVE-2011-4282
GHSA-m3xp-4hf3-qfpp
Moodle allows remote attackers to obtain sensitive information Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise … CVE-2011-4283
GHSA-86v9-gqh9-8268
Moodle vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before … CVE-2011-4286
GHSA-m97f-x4mr-4x3q
Moodle vulnerable to Cross-Site Request Forgery Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers … CVE-2011-4281
GHSA-8vjj-wf73-w882
Moodle Incorrect Default Settings The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the `moodle/course:delete` capability, … CVE-2011-4285
GHSA-mw6p-49jf-9935
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page Moodle 2.0.x before 2.0.2 allows … CVE-2011-4284
GHSA-phqj-xp48-7p7c
Moodle does not use the forceloginforprofiles setting for course-profiles access control Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles … CVE-2011-4279
GHSA-6656-6qwx-4c2m
Moodle XSS In Tag Autocomplete functionality Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 … CVE-2011-4278
GHSA-mx5g-3vxh-rgm8
Moodle vulnerable to XSS via bundled spikephpcoverage library Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as … CVE-2011-4280
GHSA-j3x5-cwfj-pfcw
Moodle does not force password changes for autosubscribed users admin/uploaduser_form.php in Moodle 2.0.x before 2.0.3 does not force password changes … CVE-2011-4287