CVSS: 4.3EPSS: 0%CPEs: 10EXPL: 1CVE-2004-1424
https://notcve.org/view.php?id=CVE-2004-1424
Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. • http://marc.info/?l=bugtraq&m=110425409614735&w=2 http://marc.info/?l=bugtraq&m=110444531816566&w=2 http://secunia.com/advisories/13694 http://www.securityfocus.com/bid/12120 https://exchange.xforce.ibmcloud.com/vulnerabilities/18702 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0CVE-2004-2236
https://notcve.org/view.php?id=CVE-2004-2236
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting. • http://moodle.org/doc/?file=releaseold.html http://www.osvdb.org/8090 •
CVSS: 10.0EPSS: 0%CPEs: 7EXPL: 0CVE-2004-2237
https://notcve.org/view.php?id=CVE-2004-2237
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts." • http://moodle.org/doc/?file=releaseold.html http://secunia.com/advisories/12262 http://www.osvdb.org/8522 •
CVSS: 5.0EPSS: 0%CPEs: 10EXPL: 1CVE-2004-1425
https://notcve.org/view.php?id=CVE-2004-1425
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter. • http://marc.info/?l=bugtraq&m=110425409614735&w=2 http://marc.info/?l=bugtraq&m=110444531816566&w=2 http://www.securityfocus.com/bid/12120 https://exchange.xforce.ibmcloud.com/vulnerabilities/18550 •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2235
https://notcve.org/view.php?id=CVE-2004-2235
Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text. • http://moodle.org/doc/?file=releaseold.html http://www.osvdb.org/7711 •