Search for packages
| purl | pkg:composer/moodle/moodle@2.1.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-62wv-866c-rh86
Aliases: CVE-2011-4297 |
Moodle does not properly restrict comment capabilities comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly … | There are no reported fixed by versions. |
|
GHSA-hxmp-8f47-x9fc
Aliases: CVE-2011-4294 |
Moodle Open Redirect Via Error Messages The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before … | There are no reported fixed by versions. |
|
GHSA-4w8m-96v9-2c86
Aliases: CVE-2011-4203 |
Moodle CRLF Injection Vulnerability in Calendar Component CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before … | There are no reported fixed by versions. |
|
GHSA-fx5h-3786-h2w6
Aliases: CVE-2012-6112 |
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests classes/GoogleSpell.php in the PHP Spellchecker (aka Google … | There are no reported fixed by versions. |
|
GHSA-mr97-gvvg-rhgh
Aliases: CVE-2012-2353 |
Moodle Exposes Sensitive User Information Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive … | There are no reported fixed by versions. |
|
GHSA-3rqj-jchw-9cc7
Aliases: CVE-2012-2356 |
Moodle Authentication Bypass in Question-Bank The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated … | There are no reported fixed by versions. |
|
GHSA-72gv-qqrp-h9qg
Aliases: CVE-2012-0797 |
Moodle Users Can Bypass Deleted Status The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before … | There are no reported fixed by versions. |
|
GHSA-jcrj-gmr6-p5j8
Aliases: CVE-2011-4301 |
Moodle Allows Modification of Constants The `MoodleQuickForm` class in the Forms Library in `lib/formslib.php` in Moodle 1.9.x before 1.9.14, 2.0.x … | There are no reported fixed by versions. |
|
GHSA-h6px-pvfh-q2jv
Aliases: CVE-2011-4299 |
Moodle vulnerable to Cross-Site Scripting Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 … | There are no reported fixed by versions. |
|
GHSA-wxvp-8q8h-r6rr
Aliases: CVE-2011-4293 |
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory The theme implementation in Moodle 2.0.x before 2.0.4 and … | There are no reported fixed by versions. |
|
GHSA-jcrj-x36p-h9f6
Aliases: CVE-2011-4582 |
Moodle Open Redirect in Calendar Set Page Open redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 … | There are no reported fixed by versions. |
|
GHSA-8hxm-42v5-66hm
Aliases: CVE-2011-4298 |
Moodle vulnerable to Cross-Site Request Forgery Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 … | There are no reported fixed by versions. |
|
GHSA-9p54-pc88-36c4
Aliases: CVE-2011-4300 |
Moodle does not properly restrict access to category and course data The `file_browser` component in Moodle 2.0.x before 2.0.5 and … | There are no reported fixed by versions. |
|
GHSA-2x36-7xfm-pgm7
Aliases: CVE-2012-1157 |
Moodle default permissions too permissive Moodle before 2.2.2 default settings allowed all repositories to be viewable by all authenticated users. | There are no reported fixed by versions. |
|
GHSA-358r-g2xw-7c83
Aliases: CVE-2012-1156 |
Moodle backs up private files Moodle before 2.2.2, 2.1.5, and 2.0.8 had users' private files included in course backups unnecessarily. | There are no reported fixed by versions. |
|
GHSA-p9hr-f4xj-8w8r
Aliases: CVE-2012-1159 |
Moodle included private user files in course backups Moodle before 2.2.2 is vulnerable to information disclosure because course backups were … | There are no reported fixed by versions. |
|
GHSA-mpjx-8phj-5m34
Aliases: CVE-2012-5471 |
Moodle Allows Unauthenticated Dropbox Access The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x … | There are no reported fixed by versions. |
|
GHSA-cr78-rphw-w73p
Aliases: CVE-2012-6099 |
Moodle Arbitrary File Read via Backup Functionality The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before … | There are no reported fixed by versions. |