Page 41 of 208 results (0.009 seconds)

CVSS: 4.3EPSS: 0%CPEs: 10EXPL: 1

CVE-2004-1424

https://notcve.org/view.php?id=CVE-2004-1424

Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. • http://marc.info/?l=bugtraq&m=110425409614735&w=2 http://marc.info/?l=bugtraq&m=110444531816566&w=2 http://secunia.com/advisories/13694 http://www.securityfocus.com/bid/12120 https://exchange.xforce.ibmcloud.com/vulnerabilities/18702 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0

CVE-2004-2236

https://notcve.org/view.php?id=CVE-2004-2236

Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting. • http://moodle.org/doc/?file=releaseold.html http://www.osvdb.org/8090 •

CVSS: 10.0EPSS: 0%CPEs: 7EXPL: 0

CVE-2004-2237

https://notcve.org/view.php?id=CVE-2004-2237

Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts." • http://moodle.org/doc/?file=releaseold.html http://secunia.com/advisories/12262 http://www.osvdb.org/8522 •

CVSS: 5.0EPSS: 0%CPEs: 10EXPL: 1

CVE-2004-1425

https://notcve.org/view.php?id=CVE-2004-1425

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter. • http://marc.info/?l=bugtraq&m=110425409614735&w=2 http://marc.info/?l=bugtraq&m=110444531816566&w=2 http://www.securityfocus.com/bid/12120 https://exchange.xforce.ibmcloud.com/vulnerabilities/18550 •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2004-2235

https://notcve.org/view.php?id=CVE-2004-2235

Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text. • http://moodle.org/doc/?file=releaseold.html http://www.osvdb.org/7711 •