Skip to content
OpenAdvisories

Package · Ubuntu

moodle

323 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

323 results · Feed

  • Medium —
    CVE-2013-1830

    Moodle does not enforce the forceloginforprofiles setting

    user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest rol…

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2011-4203

    Moodle CRLF Injection Vulnerability in Calendar Component

    CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via …

    moodle/moodle moodle Ubuntu Packagist
  • Unscored —
    CVE-2011-3757

    Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals…

    moodle Ubuntu