Moodle

Moodle

624 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2014-3548

  • EPSS 0.26%
  • Veröffentlicht 29.07.2014 11:10:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a...

4.3

CVE-2014-3549

  • EPSS 0.29%
  • Veröffentlicht 29.07.2014 11:10:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event/user_login_failed.php in Moodle 2.7.x before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted username that is improperly ...

4.3

CVE-2014-3550

  • EPSS 0.29%
  • Veröffentlicht 29.07.2014 11:10:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in Moodle 2.7.x before 2.7.1 allow remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted (1) error or (2) success message f...

3.5

CVE-2014-3551

  • EPSS 0.25%
  • Veröffentlicht 29.07.2014 11:10:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in the advanced-grading implementation in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allow remote authenticated users to inject arbitr...

6

CVE-2014-3552

  • EPSS 0.35%
  • Veröffentlicht 29.07.2014 11:10:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x before 2.4.11, and 2.5.x before 2.5.7 does not check whether a session ID is empty, which allows remote authenticated users to hijack sessions via craft...

4.9

CVE-2014-3553

  • EPSS 0.17%
  • Veröffentlicht 29.07.2014 11:10:32
  • Zuletzt bearbeitet 12.04.2025 10:46:40

mod/forum/classes/post_form.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement before proceeding with a post to all...

7.5

CVE-2014-3541

  • EPSS 1.94%
  • Veröffentlicht 29.07.2014 11:10:31
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data as...

4.3

CVE-2014-3542

  • EPSS 0.43%
  • Veröffentlicht 29.07.2014 11:10:31
  • Zuletzt bearbeitet 12.04.2025 10:46:40

mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity ref...

4.3

CVE-2014-3543

  • EPSS 0.43%
  • Veröffentlicht 29.07.2014 11:10:31
  • Zuletzt bearbeitet 12.04.2025 10:46:40

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity ...

6.8

CVE-2014-0213

  • EPSS 0.13%
  • Veröffentlicht 27.05.2014 00:55:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site request forgery (CSRF) vulnerabilities in mod/assign/locallib.php in the Assignment subsystem in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allow remote attackers to hijack the authentic...