CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0CVE-2004-2232
https://notcve.org/view.php?id=CVE-2004-2232
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements. • http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/mod/glossary/sql.php?r1=1.15.2.2&%3Br2=1.15.2.3 http://secunia.com/advisories/13091 http://securitytracker.com/id?1012113 http://www.osvdb.org/11427 http://www.securityfocus.com/bid/11608 https://exchange.xforce.ibmcloud.com/vulnerabilities/17965 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2234
https://notcve.org/view.php?id=CVE-2004-2234
Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators. • http://moodle.org/doc/?file=releaseold.html http://www.osvdb.org/7711 •
CVSS: 4.3EPSS: 0%CPEs: 10EXPL: 1CVE-2004-1424
https://notcve.org/view.php?id=CVE-2004-1424
Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. • http://marc.info/?l=bugtraq&m=110425409614735&w=2 http://marc.info/?l=bugtraq&m=110444531816566&w=2 http://secunia.com/advisories/13694 http://www.securityfocus.com/bid/12120 https://exchange.xforce.ibmcloud.com/vulnerabilities/18702 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0CVE-2004-2236
https://notcve.org/view.php?id=CVE-2004-2236
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting. • http://moodle.org/doc/?file=releaseold.html http://www.osvdb.org/8090 •
CVSS: 10.0EPSS: 0%CPEs: 7EXPL: 0CVE-2004-2237
https://notcve.org/view.php?id=CVE-2004-2237
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts." • http://moodle.org/doc/?file=releaseold.html http://secunia.com/advisories/12262 http://www.osvdb.org/8522 •