Archive
22 January 2018
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Medium 5.4
Moodle XSS Vulnerability
In Moodle 3.x, there is XSS via a calendar event name.
-
Medium 6.5
Moodle SSRF Vulnerability
Moodle 3.x has Server Side Request Forgery in the filepicker.
-
Medium 4.3
Moodle Privilege escalation in quiz web services
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings.
-
Medium 6.5
Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.