Page 44 of 243 results (0.007 seconds)

CVSS: 4.3EPSS: 0%CPEs: 12EXPL: 0

CVE-2011-4278

https://notcve.org/view.php?id=CVE-2011-4278

Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en la funcionalidad de autocompletado de etiquetas en Moodle v1.9.x antes de v1.9.11 y v2.0.x antes de v2.0.2 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de vectores no especificados. • http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=fd29b2ad1c20906da00d7e523f39bc8a0358a65b http://moodle.org/mod/forum/discuss.php?d=170003 http://openwall.com/lists/oss-security/2011/11/14/1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 5EXPL: 0

CVE-2011-4297

https://notcve.org/view.php?id=CVE-2011-4297

comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity. comment/lib.php en Moodle v2.0.x anterior a v2.0.4 y v2.1.x anterior a v2.1.1 no restringe adecuadamente las capacidades de comentarios, lo que permite a atacantes remotos para escribir un comentario, aprovechando el papel de la huésped y el funcionamiento de una actividad de primera página • http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9da3c2efadcc5f56cb8adc19c67ed16be35780f3 http://moodle.org/mod/forum/discuss.php?d=182740 http://openwall.com/lists/oss-security/2011/11/14/1 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2011-4295

https://notcve.org/view.php?id=CVE-2011-4295

The moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which allows remote authenticated users to gain privileges by making a role assignment. El moodle_enrol_external:role_assign function in enrol/externallib.php en Moodle v2.0.x anterior a v2.0.4 y v2.1.x anterior a v2.1.1 no tiene una comprobación de autorización, permite a usuarios remotos autenticados obtener privilegios mediante una asignación de funciones. • http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=d20f655d59cd486fd9b3a26ad353af13daafd1d3 http://moodle.org/mod/forum/discuss.php?d=182738 http://openwall.com/lists/oss-security/2011/11/14/1 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 4.0EPSS: 0%CPEs: 3EXPL: 0

CVE-2011-4289

https://notcve.org/view.php?id=CVE-2011-4289

Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page. Moodle v2.0.x anterior a v2.0.3 no reconoce el valor de configuración que hace que direcciones de correo electrónico sólo visible para los miembros del curso, lo que permite a usuarios remotos autenticados obtener la información de dirección sensible a la lectura de una página de perfil completo. • http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=181991e791a13a3c383234718c26c499e31d3df1 http://moodle.org/mod/forum/discuss.php?d=175591 http://openwall.com/lists/oss-security/2011/11/14/1 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2011-4296

https://notcve.org/view.php?id=CVE-2011-4296

lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect capabilities to the course-creator role, which allows remote authenticated users to modify course filters by leveraging this role. lib/db/access.php en Moodle v2.0.x anterior a v2.0.4 y v2.1.x anterior a v2.1.1 asigna funciones incorrectas para el rol course-creator, permite a usuarios remotos autenticados para modificar los filtros del curso mediante el aprovechamiento de este papel. • http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=88d823c1f491a3c74f67bbf74306a8d1109dee02 http://moodle.org/mod/forum/discuss.php?d=182739 http://openwall.com/lists/oss-security/2011/11/14/1 • CWE-264: Permissions, Privileges, and Access Controls •