Unscored DSA-1724-1 4 CVEs

- several vulnerabilities

Published Feb 13, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	moodle	1.6.3-2+etch2

Vulnerabilities 4

Medium —

CVE-2008-5153

Moodle vulnerable to symlink attack

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/spell-check-debug.log, (2) /tmp/spell-check-before, or (3) /tmp/spell-check-after temporary file.

moodle/moodle Packagist

Nov 18, 2008
Unscored —

CVE-2008-6125

Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows …

Feb 13, 2009
Unscored —

CVE-2009-0500

Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8…

Feb 10, 2009
Unscored —

CVE-2009-0502

Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.…

Feb 10, 2009