Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersmoodle: IDOR when fetching report schedules
moodle: IDOR in edit/delete RSS feed
Moodle leaks user names
moodle: Some users can delete audiences of other reports
Moodle IDOR when accessing list of badge recipients
Moodle reflected XSS via H5P error message
Moodle Cross-site Scripting vulnerability
Moodle has insufficient access control
Moodle authorization headers preserved between "emulated redirects"
Moodle has insufficient capability checks
Moodle admin presets export tool includes some secrets that should not be exported
Moodle's user/power level management inconsistent with suspended users
Moodle has user information visibility control issues in gradebook reports
Moodle vulnerable to site administration SQL injection via XMLDB editor
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
Moodle has arbitrary file read risk through pdfTeX
Moodle LFI vulnerability when restoring malformed block backups
Moodle Remote Code Execution vulnerability
Moodle vulnerable to cache poisoning via injection into storage
Moodle's IDOR in badges allows deletion of arbitrary badges
Moodle has CSRF risk in Feedback non-respondents report
Moodle uses the same key for QR login and auto-login
Moodle BigBlueButton web service leaks meeting joining information
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.