Search for packages
| purl | pkg:composer/moodle/moodle@2.2.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-fx5h-3786-h2w6
Aliases: CVE-2012-6112 |
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests classes/GoogleSpell.php in the PHP Spellchecker (aka Google … | There are no reported fixed by versions. |
|
GHSA-8r7x-qq55-74v2
Aliases: CVE-2013-1830 |
Moodle does not enforce the forceloginforprofiles setting `user/view.php` in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … | There are no reported fixed by versions. |
|
GHSA-mr97-gvvg-rhgh
Aliases: CVE-2012-2353 |
Moodle Exposes Sensitive User Information Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive … | There are no reported fixed by versions. |
|
GHSA-3rqj-jchw-9cc7
Aliases: CVE-2012-2356 |
Moodle Authentication Bypass in Question-Bank The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated … | There are no reported fixed by versions. |
|
GHSA-72gv-qqrp-h9qg
Aliases: CVE-2012-0797 |
Moodle Users Can Bypass Deleted Status The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before … | There are no reported fixed by versions. |
|
GHSA-89f3-74m6-g27g
Aliases: CVE-2013-1833 |
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module Multiple cross-site scripting (XSS) vulnerabilities in the File Picker … | There are no reported fixed by versions. |
|
GHSA-xr24-jp5c-6c4v
Aliases: CVE-2013-1831 |
Moodle reveals absolute path in exception message lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … | There are no reported fixed by versions. |
|
GHSA-pgp5-rcwp-qvfg
Aliases: CVE-2013-1832 |
Moodle includes the WebDAV password in the configuration form repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before … | There are no reported fixed by versions. |
|
CVE-2013-2083
Aliases: GHSA-m63h-q4x3-6hwj |
Improper Input Validation The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x … |
Vulnerable Vulnerable |
|
CVE-2013-1833
Aliases: GHSA-89f3-74m6-g27g |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-2x36-7xfm-pgm7
Aliases: CVE-2012-1157 |
Moodle default permissions too permissive Moodle before 2.2.2 default settings allowed all repositories to be viewable by all authenticated users. | There are no reported fixed by versions. |
|
GHSA-358r-g2xw-7c83
Aliases: CVE-2012-1156 |
Moodle backs up private files Moodle before 2.2.2, 2.1.5, and 2.0.8 had users' private files included in course backups unnecessarily. | There are no reported fixed by versions. |
|
GHSA-p9hr-f4xj-8w8r
Aliases: CVE-2012-1159 |
Moodle included private user files in course backups Moodle before 2.2.2 is vulnerable to information disclosure because course backups were … | There are no reported fixed by versions. |
|
GHSA-mpjx-8phj-5m34
Aliases: CVE-2012-5471 |
Moodle Allows Unauthenticated Dropbox Access The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x … | There are no reported fixed by versions. |
|
GHSA-cr78-rphw-w73p
Aliases: CVE-2012-6099 |
Moodle Arbitrary File Read via Backup Functionality The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before … | There are no reported fixed by versions. |