Open Source Vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers obtain full-name information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle directory traversal vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not consider the moodle/tag:flag capability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass a messaging-disabled setting

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not consider the moodle/tag:edit capability before adding a tag

moodle/moodle, moodle/moodle

Moodle allows attacks to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to cause a denial of service

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Temporary Passwords are Brute Force-able

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to trigger the generation of arbitrary messages

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not provide charset information in HTTP headers

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive calendar-event information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to remove wiki pages

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to cause a denial of service

moodle/moodle, moodle/moodle

Moodle allows attackers to upload files containing JavaScript

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site request forgery (CSRF) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows discovery of an author's username

moodle/moodle

Moodle exposes hidden grades to students

moodle/moodle, moodle/moodle

Moodle does not verify group permissions

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain sensitive information

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle

Moodle does not enforce the moodle/site:accessallgroups capability requirement

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to bypass the mod/lti:view capability requirement

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Arbitrary File Read via XML External Entity vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Does Not Escape Characters In Email Headers

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Weak Password Recovery Mechanism for Forgotten Password

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle remote code execution via quiz questions

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to obtain username and course information

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site scripting (XSS) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Incorrect sanitation of attributes in forums

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle vulnerable to PHP object injection attacks

moodle/moodle, moodle/moodle, moodle/moodle

Moodle multiple cross-site scripting (XSS) vulnerabilities

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Unauthenticated Access

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows remote attackers to read arbitrary files

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to modify "Exclude grade" settings

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle sensitive information disclosure

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle XSS from profile fields from external db

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle External function mod_assign_save_submission does not check due dates

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle cross-site request forgery (CSRF) vulnerability

moodle/moodle, moodle/moodle, moodle/moodle

Moodle allows attackers to discover hidden course names

moodle/moodle, moodle/moodle, moodle/moodle, moodle/moodle

Moodle Improper Access Control

moodle/moodle, moodle/moodle, moodle/moodle

Moodle Cross-site scripting (XSS) vulnerability in course management search