Moodle

Moodle

601 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2016-2159

  • EPSS 0.21%
  • Veröffentlicht 22.05.2016 20:59:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The save_submission function in mod/assign/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote authenticated users to bypass intended due-date restrictions by le...

4.3

CVE-2016-2158

  • EPSS 0.33%
  • Veröffentlicht 22.05.2016 20:59:07
  • Zuletzt bearbeitet 12.04.2025 10:46:40

lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information ...

8.8

CVE-2016-2157

  • EPSS 0.1%
  • Veröffentlicht 22.05.2016 20:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication o...

4.3

CVE-2016-2156

  • EPSS 0.3%
  • Veröffentlicht 22.05.2016 20:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

calendar/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 provides calendar-event data without considering whether an activity is hidden, which allows remote authenticated ...

4.3

CVE-2016-2155

  • EPSS 0.3%
  • Veröffentlicht 22.05.2016 20:59:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The grade-reporting feature in Singleview (aka Single View) in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grade:manage capability, which allows remote authenticated users to modify "Exclude gra...

4.3

CVE-2016-2154

  • EPSS 0.33%
  • Veröffentlicht 22.05.2016 20:59:03
  • Zuletzt bearbeitet 12.04.2025 10:46:40

admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course ...

6.1

CVE-2016-2153

  • EPSS 0.22%
  • Veröffentlicht 22.05.2016 20:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the advanced-search feature in mod_data in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to inject arbitrary web script ...

6.1

CVE-2016-2152

  • EPSS 0.22%
  • Veröffentlicht 22.05.2016 20:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via a...

4.3

CVE-2016-2151

  • EPSS 0.33%
  • Veröffentlicht 22.05.2016 20:59:00
  • Zuletzt bearbeitet 12.04.2025 10:46:40

user/index.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 grants excessive authorization on the basis of the moodle/course:viewhiddenuserfields capability, which allows remote authen...

6.1

CVE-2016-0725

  • EPSS 0.6%
  • Veröffentlicht 22.02.2016 05:59:22
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or H...