Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersMoodle includes the WebDAV password in the configuration form
Moodle does not enforce the forceloginforprofiles setting
Moodle Arbitrary File Read via Backup Functionality
YUI Cross-site Scripting (XSS) vulnerability
Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
YUI Cross-site Scripting (XSS) vulnerability
YUI Cross-site Scripting (XSS) vulnerability
Moodle cross-site scripting (XSS) vulnerability
Moodle cross-site scripting (XSS) vulnerability
Moodle Reveals Student Information Meant To Be Anonymous
Moodle does not properly restrict file access
Moodle attackers to modify grade metadata
Moodle allows attackers to modify the visibility of a badge
Moodle does not check for the moodle/course:viewhiddencourses capability
Moodle's time-validation implementation allows bypassing intended restrictions
Moodle cross-site request forgery (CSRF) vulnerability
Moodle creates a MoodleMobile web-service token with an infinite lifetime
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
Moodle places a session key in a URL
Moodle allows attackers to obtain sensitive information
Moodle allows bypass of intended access restrictions
Moodle does not properly restrict access
Moodle allows attackers to bypass intended access restrictions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.