Skip to content
OpenAdvisories

Archive

25 March 2013

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low —

    Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module

    Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted fi…

  • Low —

    Moodle's login_as feature leaks information from external repositories

    Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature.