Page 40 of 200 results (0.011 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2006-4784

https://notcve.org/view.php?id=CVE-2006-4784

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php. Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Moodle 1.6.1 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante parámetros no especificados para (1) dos/index.php o (2) files/index.php. • http://docs.moodle.org/en/Release_Notes#Moodle_1.6.2 http://secunia.com/advisories/21899 http://www.securityfocus.com/bid/19995 http://www.vupen.com/english/advisories/2006/3591 https://exchange.xforce.ibmcloud.com/vulnerabilities/28905 •

CVSS: 10.0EPSS: 0%CPEs: 15EXPL: 0

CVE-2005-2247

https://notcve.org/view.php?id=CVE-2005-2247

Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors. • http://moodle.org/doc/?frame=release.html http://secunia.com/advisories/16028 •

CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0

CVE-2004-2232

https://notcve.org/view.php?id=CVE-2004-2232

SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements. • http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/mod/glossary/sql.php?r1=1.15.2.2&amp%3Br2=1.15.2.3 http://secunia.com/advisories/13091 http://securitytracker.com/id?1012113 http://www.osvdb.org/11427 http://www.securityfocus.com/bid/11608 https://exchange.xforce.ibmcloud.com/vulnerabilities/17965 •

CVSS: 4.3EPSS: 0%CPEs: 10EXPL: 1

CVE-2004-1424

https://notcve.org/view.php?id=CVE-2004-1424

Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. • http://marc.info/?l=bugtraq&m=110425409614735&w=2 http://marc.info/?l=bugtraq&m=110444531816566&w=2 http://secunia.com/advisories/13694 http://www.securityfocus.com/bid/12120 https://exchange.xforce.ibmcloud.com/vulnerabilities/18702 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 10EXPL: 1

CVE-2004-1425

https://notcve.org/view.php?id=CVE-2004-1425

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter. • http://marc.info/?l=bugtraq&m=110425409614735&w=2 http://marc.info/?l=bugtraq&m=110444531816566&w=2 http://www.securityfocus.com/bid/12120 https://exchange.xforce.ibmcloud.com/vulnerabilities/18550 •