Search for packages
| purl | pkg:composer/moodle/moodle@2.3.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-64r3-582j-frqm
Aliases: CVE-2013-4941 |
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through … |
Vulnerable |
|
GHSA-fx5h-3786-h2w6
Aliases: CVE-2012-6112 |
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests classes/GoogleSpell.php in the PHP Spellchecker (aka Google … |
Vulnerable |
|
GHSA-x3x8-fjw6-hccx
Aliases: CVE-2013-2081 |
Moodle does not consider "don't send" attributes during hub registration Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and … |
Vulnerable |
|
GHSA-9ww8-j8j2-3788
Aliases: CVE-2013-4942 |
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through … |
Vulnerable |
|
GHSA-8r7x-qq55-74v2
Aliases: CVE-2013-1830 |
Moodle does not enforce the forceloginforprofiles setting `user/view.php` in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … |
Vulnerable |
|
GHSA-w66h-c2vj-cm7f
Aliases: CVE-2012-3387 |
Moodle Authentication Bypass in File Upload Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted … | There are no reported fixed by versions. |
|
GHSA-664q-mrxx-2x2v
Aliases: CVE-2013-1836 |
Moodle does not properly manage privileges for WebDAV repositories Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and … |
Vulnerable |
|
GHSA-89f3-74m6-g27g
Aliases: CVE-2013-1833 |
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module Multiple cross-site scripting (XSS) vulnerabilities in the File Picker … |
Vulnerable |
|
GHSA-cc94-hwj3-rf65
Aliases: CVE-2013-1835 |
Moodle's login_as feature leaks information from external repositories Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … |
Vulnerable |
|
GHSA-xr24-jp5c-6c4v
Aliases: CVE-2013-1831 |
Moodle reveals absolute path in exception message lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x … |
Vulnerable |
|
GHSA-wp3g-pr4h-q6vv
Aliases: CVE-2013-2082 |
Moodle does not enforce capability requirements for reading blog comments Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and … |
Vulnerable |
|
GHSA-pgp5-rcwp-qvfg
Aliases: CVE-2013-1832 |
Moodle includes the WebDAV password in the configuration form repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before … |
Vulnerable |
|
GHSA-m63h-q4x3-6hwj
Aliases: CVE-2013-2083 |
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class The MoodleQuickForm class in `lib/formslib.php` in Moodle through 2.1.10, 2.2.x … |
Vulnerable |
|
GHSA-prrh-679x-79qh
Aliases: CVE-2013-1834 |
Moodle allows remote authenticated users to reassign notes notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, … |
Vulnerable |
|
CVE-2013-2083
Aliases: GHSA-m63h-q4x3-6hwj |
Improper Input Validation The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x … |
Vulnerable Vulnerable |
|
CVE-2013-2080
Aliases: GHSA-wmmc-qjq2-vvm2 |
Moodle is vulnerable to Sensitive Information Disclosure The core_grade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before … |
Vulnerable Vulnerable |
|
CVE-2013-1833
Aliases: GHSA-89f3-74m6-g27g |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-mpjx-8phj-5m34
Aliases: CVE-2012-5471 |
Moodle Allows Unauthenticated Dropbox Access The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x … | There are no reported fixed by versions. |
|
GHSA-x5hj-47vv-53p8
Aliases: CVE-2013-4940 |
YUI Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, … |
Vulnerable Vulnerable |
|
GHSA-cr78-rphw-w73p
Aliases: CVE-2012-6099 |
Moodle Arbitrary File Read via Backup Functionality The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before … |
Vulnerable |