Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filtersMoodle has a Remote Code Execution risk via file restore
Moodle Affected by Improper Restriction of Excessive Authentication Attempts
Moodle has an authorization logic flaw
Moodle vulnerable to Cross-site Scripting
Moodle Inserts Sensitive Information Into Sent Data
Moodle Open Redirect vulnerability
Moodle authentication bypass vulnerability
Moodle Cross-site Scripting (XSS) vulnerability
Moodle vulnerable to Cross-site Scripting
Moodle formula injection vulnerability
Moodle affected by a code injection vulnerability
Moodle does not properly enforce MFA
Moodle's error handling leads to sensitive information disclosure
Moodle has a time restriction bypass
Moodle vulnerable to brute-force password guesses
Moodle exposed the names of hidden groups to users
Moodle sends quiz-related messages to inactive/suspended users
Moodle course access permissions are not properly checked in course_output_fragment_course_overview
Moodle Session Fixation allows unauthenticated users to hijack sessions via sesskey parameter
Moodle allows IDOR when accessing the cohorts report
Moodle's mod_data edit/delete pages pass CSRF token in GET parameter
Moodle has an IDOR in messaging web service which allows access to some user details
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.