moodle - several

Fixed packages 1

Vulnerabilities 6

• Medium —
  CVE-2011-4133

  Moodle vulnerable to Cross-Site Request Forgery

  Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

  moodle/moodle Packagist
  Jul 16, 2012
• Medium —
  CVE-2011-4278

  Moodle XSS In Tag Autocomplete functionality

  Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  moodle/moodle Packagist
  Jul 16, 2012
• Medium —
  CVE-2011-4283

  Moodle allows remote attackers to obtain sensitive information

  Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.

  moodle/moodle Packagist
  Jul 16, 2012
• Medium —
  CVE-2011-4286

  Moodle vulnerable to Cross-site Scripting

  Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1…

  moodle/moodle Packagist
  Jul 16, 2012
• Unscored —
  CVE-2011-4288

  Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups,…

  Jul 16, 2012
• Unscored —
  CVE-2011-4290

  Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attack…

  Jul 16, 2012