CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2005-3648
https://notcve.org/view.php?id=CVE-2005-3648
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php. Múltiples vulnerabilidades de inyección de SQL en la función get_record en datalib.php de Moodle 1.5.2 permite a atacantes remotos ejecutar órdenes SQL de su elección mediante el parámetro id en (1) category.php y (2) info.php. • http://marc.info/?l=bugtraq&m=113165668814241&w=2 http://osvdb.org/20748 http://rgod.altervista.org/moodle16dev.html http://secunia.com/advisories/17526 http://securitytracker.com/id?1015181 http://www.securityfocus.com/bid/15380 http://www.vupen.com/english/advisories/2005/2387 https://exchange.xforce.ibmcloud.com/vulnerabilities/23058 •
CVSS: 2.6EPSS: 1%CPEs: 1EXPL: 2CVE-2005-3649 – Moodle 1.6dev - SQL Injection / Command Execution
https://notcve.org/view.php?id=CVE-2005-3649
jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter. jumto.php en Moodle 1.5.2 permite a atacantes remotos redirigir usuarios a otros sitios mediante el parámetro jump. • https://www.exploit-db.com/exploits/1312 http://marc.info/?l=bugtraq&m=113165668814241&w=2 http://rgod.altervista.org/moodle16dev.html http://secunia.com/advisories/17526 http://securityreason.com/securityalert/168 http://www.osvdb.org/20750 http://www.vupen.com/english/advisories/2005/2387 •
CVSS: 10.0EPSS: 0%CPEs: 15EXPL: 0CVE-2005-2247
https://notcve.org/view.php?id=CVE-2005-2247
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors. • http://moodle.org/doc/?frame=release.html http://secunia.com/advisories/16028 •