Moodle ≫ Moodle

610 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.4

CVE-2017-7298

Exploit

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.

9.8

In Moodle 2.x and 3.x, SQL injection can occur via user preferences.

5.3

In Moodle 3.2.x, global search displays user names for unauthenticated users.

6.1

In Moodle 3.x, XSS can occur via evidence of prior learning.

6.1

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.

5.3

In Moodle 3.x, glossary search displays entries without checking user permissions to view them.

5.8

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.

5.8

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.

7.3

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.

5.3

In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.