Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersMoodle HTTP authorization header is preserved between "emulated redirects"
Moodle CSRF risks due to misuse of confirm_sesskey
Moodle ReCAPTCHA can be bypassed on the login page
Moodle Unsanitized HTML in site log for config_log_created
Moodle Logout CSRF in admin/tool/mfa/auth.php
Moodle CSRF risk in analytics management of models
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Moodle CSRF risk in admin preset tool management of presets
Moodle Cross-site Scripting (XSS)
Moodle Improper Input Validation
Moodle stored Cross-site Scripting (XSS)
Moodle Cross-site Scripting (XSS)
Moodle broken access control when setting calendar event type
Cross-site Scripting in Moodle Chat
Cross site scripting in moodle
Improper Access Control in moodle
Authorization Bypass in moodle
Improper Access Control in moodle
Uncontrolled Resource Consumption in moodle
Improper Handling of Parameters in moodle
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.