Skip to content
OpenAdvisories
Unscored DSA-2172-1 5 CVEs

moodle - several

Published Feb 22, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 moodle 1.8.13-3

Vulnerabilities 5

  • Unscored —
    CVE-2010-2795

    phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket…

  • Unscored —
    CVE-2010-2796

    Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to…

  • Unscored —
    CVE-2010-3690

    Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote at…

  • Unscored —
    CVE-2010-3691

    PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary f…

  • Unscored —
    CVE-2010-3692

    Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is ena…