Moodle

Moodle

601 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2016-2159

  • EPSS 0.21%
  • Published 22.05.2016 20:59:08
  • Last modified 12.04.2025 10:46:40

The save_submission function in mod/assign/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote authenticated users to bypass intended due-date restrictions by le...

4.3

CVE-2016-2158

  • EPSS 0.33%
  • Published 22.05.2016 20:59:07
  • Last modified 12.04.2025 10:46:40

lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information ...

8.8

CVE-2016-2157

  • EPSS 0.1%
  • Published 22.05.2016 20:59:06
  • Last modified 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication o...

4.3

CVE-2016-2156

  • EPSS 0.3%
  • Published 22.05.2016 20:59:05
  • Last modified 12.04.2025 10:46:40

calendar/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 provides calendar-event data without considering whether an activity is hidden, which allows remote authenticated ...

4.3

CVE-2016-2155

  • EPSS 0.3%
  • Published 22.05.2016 20:59:04
  • Last modified 12.04.2025 10:46:40

The grade-reporting feature in Singleview (aka Single View) in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grade:manage capability, which allows remote authenticated users to modify "Exclude gra...

4.3

CVE-2016-2154

  • EPSS 0.33%
  • Published 22.05.2016 20:59:03
  • Last modified 12.04.2025 10:46:40

admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course ...

6.1

CVE-2016-2153

  • EPSS 0.22%
  • Published 22.05.2016 20:59:02
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the advanced-search feature in mod_data in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to inject arbitrary web script ...

6.1

CVE-2016-2152

  • EPSS 0.22%
  • Published 22.05.2016 20:59:01
  • Last modified 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via a...

4.3

CVE-2016-2151

  • EPSS 0.33%
  • Published 22.05.2016 20:59:00
  • Last modified 12.04.2025 10:46:40

user/index.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 grants excessive authorization on the basis of the moodle/course:viewhiddenuserfields capability, which allows remote authen...

6.1

CVE-2016-0725

  • EPSS 0.6%
  • Published 22.02.2016 05:59:22
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or H...