Archive
20 January 2017
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Medium 5.3
Moodle Unauthenticated Access
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
-
Medium 5.4
Moodle Does Not Escape Characters In Email Headers
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
-
Medium 5.4
Moodle sensitive information disclosure
In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.
-
Medium 5.3
Moodle Glossary search displays entries without checking user permissions to view them
In Moodle 3.x, glossary search displays entries without checking user permissions to view them.
-
Medium 6.1
Moodle Cross-site Scripting in assignment submission page
In Moodle 3.x, there is XSS in the assignment submission page.
-
Medium 5.3
Moodle Incorrect sanitation of attributes in forums
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.