Search for packages
| purl | pkg:composer/moodle/moodle@2.1.10 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8r7x-qq55-74v2
Aliases: CVE-2013-1830 |
Moodle does not enforce the forceloginforprofiles setting `user/view.php` in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … | There are no reported fixed by versions. |
|
GHSA-89f3-74m6-g27g
Aliases: CVE-2013-1833 |
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module Multiple cross-site scripting (XSS) vulnerabilities in the File Picker … | There are no reported fixed by versions. |
|
GHSA-xr24-jp5c-6c4v
Aliases: CVE-2013-1831 |
Moodle reveals absolute path in exception message lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … | There are no reported fixed by versions. |
|
GHSA-pgp5-rcwp-qvfg
Aliases: CVE-2013-1832 |
Moodle includes the WebDAV password in the configuration form repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before … | There are no reported fixed by versions. |
|
CVE-2013-2083
Aliases: GHSA-m63h-q4x3-6hwj |
Improper Input Validation The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-fx5h-3786-h2w6
|
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests classes/GoogleSpell.php in the PHP Spellchecker (aka Google … |
CVE-2012-6112
|
|
CVE-2013-1833
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module … |
GHSA-89f3-74m6-g27g
|
|
GHSA-cr78-rphw-w73p
|
Moodle Arbitrary File Read via Backup Functionality The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before … |
CVE-2012-6099
|