|
294431
|
- |
|
moodle
|
moodle
|
mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover the username of a wiki creator by visiting the history and deletion user interfa…
|
CWE-200
Information Exposure
|
CVE-2011-4581
|
2024-11-21 10:32 |
2012-07-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294432
|
- |
|
oracle
|
sun_glassfish_enterprise_server
|
Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integrity, related to JSF.
|
NVD-CWE-noinfo
|
CVE-2011-4358
|
2024-11-21 10:32 |
2012-07-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294433
|
- |
|
moodle
|
moodle
|
comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and o…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4297
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294434
|
- |
|
moodle
|
moodle
|
lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect capabilities to the course-creator role, which allows remote authenticated users to modify course filters by le…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4296
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294435
|
- |
|
moodle
|
moodle
|
The moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which allows remote authenticated use…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4295
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294436
|
- |
|
moodle
|
moodle
|
The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle …
|
CWE-20
Improper Input Validation
|
CVE-2011-4294
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294437
|
- |
|
moodle
|
moodle
|
The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2011-4293
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294438
|
- |
|
moodle
|
moodle
|
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.
|
CWE-89
SQL Injection
|
CVE-2011-4292
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294439
|
- |
|
moodle
|
moodle
|
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations.
|
NVD-CWE-noinfo
|
CVE-2011-4291
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
294440
|
- |
|
moodle
|
moodle
|
Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding.
|
CWE-79
Cross-site Scripting
|
CVE-2011-4290
|
2024-11-21 10:32 |
2012-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|