Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Moodle
HIGH 7.8
Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, which all…
Moodle
HIGH 7.5
Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd paramete…
Moodle
MEDIUM 6.8
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arbitrary web script or HTML via …
Moodle
MEDIUM 6.8
Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject arbitrary web script or HTML via…
Moodle
MEDIUM 5.1
SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a doub…
Moodle
HIGH 10.0
The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.
Moodle
HIGH 10.0
Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote a…
Moodle
MEDIUM 5.0
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might al…
Moodle
MEDIUM 5.0
login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) …
Moodle
MEDIUM 5.0
course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows…
Moodle
HIGH 7.5
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format par…
Moodle
MEDIUM 5.0
Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving schedul…
Moodle
HIGH 7.5
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) …
Moodle
HIGH 7.5
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis…
Moodle
HIGH 7.5
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL comm…
Moodle
HIGH 10.0
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.
Moodle
HIGH 10.0
Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.
Moodle
HIGH 10.0
Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.
Moodle
HIGH 10.0
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.
Moodle
HIGH 10.0
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."
Moodle
HIGH 7.5
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.
Moodle
MEDIUM 5.0
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session I…
Moodle
MEDIUM 6.8
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via t…