Page 21 of 203 results (0.003 seconds)

CVSS: 7.5EPSS: 0%CPEs: 19EXPL: 0

CVE-2011-4302

https://notcve.org/view.php?id=CVE-2011-4302

11 Jul 2012 — mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate. mnet/xmlrpc/client.php en MNET en Moodle v1.9.x antes de v1.9.14, v2.0.x antes de v2.0.5, v2.1.2 antes de v2.1.x, no procesa correctamente el valor de retorno de la función openssl_verify, lo que permite a atacantes remotos evitar la validación a través ... • http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=54941685e3e86ec085641dcb7ebb1f96f06735b2 • CWE-20: Improper Input Validation •

CVSS: 4.3EPSS: 0%CPEs: 20EXPL: 0

CVE-2011-4308

https://notcve.org/view.php?id=CVE-2011-4308

11 Jul 2012 — mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors. mod/forum/user.php en Moodle v1.9.x antes de v1.9.14, v2.0.x antes de v2.0.5 y v2.1.x antes de v2.1.2 permite descubrir los nombres de otros usuarios a usuarios remotos autenticados a través de vectores no especificados. • http://git.moodle.org/gw?p=moodle.git&a=search&s=MDL-28615 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.1EPSS: 0%CPEs: 24EXPL: 1

CVE-2011-4203

https://notcve.org/view.php?id=CVE-2011-4203

22 Dec 2011 — CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable. Vulnerabilidad de inyección en CRLF en ficheros calendar/set.php en el componente Calendar en Moodle v1.9.x anteriores a v1.9.15, v2.0.x anteriores a v2.0.6, v2.1.x anteriores a v2.1.3, y v2.2 permiten a atacantes rem... • http://penturalabs.wordpress.com/2011/12/13/advisory-crlf-injection-vulnerability-in-moodle • CWE-94: Improper Control of Generation of Code ('Code Injection') •