moodle - several vulnerabilities

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2007-3555 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web s…

  Jul 4, 2007
• Medium —
  CVE-2008-1502 EPSS 11%

  Moodle vulnerable to Cross-site scripting

  The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a st…

  moodle/moodle wordpress Debian Packagist
  Mar 25, 2008
• Unscored —
  CVE-2008-3325

  Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attac…

  Jul 25, 2008
• Unscored —
  CVE-2008-3326

  Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows re…

  Jul 25, 2008
• Unscored —
  CVE-2008-4796

  The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-sn…

  wordpress libphp-snoopy Debian
  Oct 30, 2008
• Unscored —
  CVE-2008-4810

  The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 before r2797 allows remote attacker…

  Oct 31, 2008
• Unscored —
  CVE-2008-4811

  The _expand_quoted_text function in libs/Smarty_Compiler.class.php in Smarty 2.6.20 r2797 and earlier allows remote att…

  Oct 31, 2008
• Unscored —
  CVE-2008-5432

  Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9…

  Dec 11, 2008
• Unscored —
  CVE-2008-6124

  SQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the HotPot module in Moodl…

  Feb 13, 2009