Skip to content
OpenAdvisories

Archive

25 March 2013

Vulnerabilities first published on this day (UTC), newest first.

← February 2013 2013 / March /25 April 2013 →
  1. 119
  2. 28
  3. 33
  4. 418
  5. 52
  6. 69
  7. 722
  8. 816
  9. 918
  10. 10 
  11. 1121
  12. 1232
  13. 1327
  14. 1419
  15. 1515
  16. 16 
  17. 17 
  18. 183
  19. 1922
  20. 2029
  21. 2127
  22. 2220
  23. 23 
  24. 24 
  25. 258
  26. 267
  27. 2737
  28. 2835
  29. 2921
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium —
    CVE-2013-1832

    Moodle includes the WebDAV password in the configuration form

    repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 includes the WebDAV password in the configuration form, which allows remote authenticated administrators to obtain sensitive information by …

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-1836

    Moodle does not properly manage privileges for WebDAV repositories

    Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by lever…

    moodle/moodle moodle Ubuntu Packagist
  • Low —
    CVE-2013-1833

    Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module

    Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted fi…

    moodle/moodle moodle Ubuntu Packagist
  • Low —
    CVE-2013-1835

    Moodle's login_as feature leaks information from external repositories

    Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature.

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-1831

    Moodle reveals absolute path in exception message

    lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message.

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2013-1834

    Moodle allows remote authenticated users to reassign notes

    notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified (1) userid or (2) courseid field.

    moodle/moodle moodle Ubuntu Packagist
  • Unscored —
    CVE-2013-1829

    calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displayi…

  • Medium —
    CVE-2013-1830

    Moodle does not enforce the forceloginforprofiles setting

    user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest rol…

    moodle/moodle moodle Ubuntu Packagist