Medium
CVE-2010-1618
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filters
Medium
CVE-2011-4278
Moodle XSS In Tag Autocomplete functionality
Medium
CVE-2011-4133
Moodle vulnerable to Cross-Site Request Forgery
Low
CVE-2010-1617
Moodle doesn't properly check role
Low
CVE-2010-1614
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2010-1613
Moodle Session Fixation vulnerability
Low
CVE-2010-1619
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2010-1616
Moodle is vulnerable to unauthorized new accounts creation
Medium
CVE-2012-2356
Moodle Authentication Bypass in Question-Bank
Medium
CVE-2012-2353
Moodle Exposes Sensitive User Information
Medium
CVE-2010-2230
Moodle Cross-site Scripting vulnerability in the KSES text cleaning filter
Medium
CVE-2011-4203
Moodle CRLF Injection Vulnerability in Calendar Component
Medium
CVE-2012-0797
Moodle Users Can Bypass Deleted Status
Medium
CVE-2012-5471
Moodle Allows Unauthenticated Dropbox Access
Medium
CVE-2013-2082
Moodle does not enforce capability requirements for reading blog comments
Medium
CVE-2013-2081
Moodle does not consider "don't send" attributes during hub registration
Medium
CVE-2013-2083
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
Low
CVE-2013-1835
Moodle's login_as feature leaks information from external repositories
Low
CVE-2013-1833
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module
Medium
CVE-2012-3387
Moodle Authentication Bypass in File Upload
Medium
CVE-2013-2080
Moodle is vulnerable to Sensitive Information Disclosure
Medium
CVE-2013-1836
Moodle does not properly manage privileges for WebDAV repositories
Medium
CVE-2013-1834
Moodle allows remote authenticated users to reassign notes
Medium
CVE-2012-6112
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.