moodle - several

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2011-4308

  mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticate…

  Jul 11, 2012
• Unscored —
  CVE-2011-4584

  The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows …

  Jul 20, 2012
• Unscored —
  CVE-2011-4585

  login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the htt…

  Jul 20, 2012
• Unscored —
  CVE-2011-4586

  CRLF injection vulnerability in calendar/set.php in the Calendar subsystem in Moodle 1.9.x before 1.9.15, 2.0.x before …

  Jul 20, 2012
• Unscored —
  CVE-2011-4587

  lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle ce…

  Jul 20, 2012
• Unscored —
  CVE-2011-4588

  The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allow…

  Jul 20, 2012
• Unscored —
  CVE-2012-0792

  mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other detail…

  Jul 17, 2012
• Unscored —
  CVE-2012-0793

  Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to v…

  Jul 17, 2012
• Unscored —
  CVE-2012-0794

  The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and…

  Jul 17, 2012
• Unscored —
  CVE-2012-0795

  Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail add…

  Jul 17, 2012
• High —
  CVE-2012-0796

  PHPMailer vulnerable to email header injection

  class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving …

  phpmailer/phpmailer Packagist
  Jul 17, 2012