Show filters
109 Total Results
Displaying 101-109 of 109
Sort by:
Attacker Value
Unknown
CVE-2011-4308
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-4303
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.
0
Attacker Value
Unknown
CVE-2011-4300
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file.
0
Attacker Value
Unknown
CVE-2011-4299
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment.
0
Attacker Value
Unknown
CVE-2011-4307
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
0
Attacker Value
Unknown
CVE-2011-4301
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields.
0
Attacker Value
Unknown
CVE-2011-4304
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.
0
Attacker Value
Unknown
CVE-2011-4302
Disclosure Date: July 11, 2012 (last updated October 04, 2023)
mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.
0
Attacker Value
Unknown
CVE-2011-4203
Disclosure Date: December 22, 2011 (last updated October 04, 2023)
CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.
0
