Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersMoodle Portfolio forum caller class allows a user to download any file
Moodle Portfolio script allows instantiation of class chosen by user
Moodle SSRF Vulnerability
Moodle SSRF Vulnerability
Moodle Cross-site Scripting
Moodle Improper Privilege Management
Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames
Moodle Unauthorized searching of arbitrary blogs by typing full url
Moodle Improper Privilege Management
Moodle External blog editing takeover
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Moodle sensitive information disclosure
Moodle Cross-site Scripting
Moodle XML import of ddwtos could lead to intentional remote code execution
Moodle Login CSRF vulnerability in login form
Moodle Improper Authentication
Moodle Blind SSRF Risk in /badges/mybackpack.php
Moodle Stored HTML in assignment submission comments allowed links to be opened directly
Moodle context freezing
Moodle Secure layout contained an insecure link in Boost theme
Moodle calculated question type allows remote code execution by Question authors
Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script
Moodle Users could elevate their role when accessing the LTI tool on a provider site
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.