Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4274 State: PUBLISHED Published: 2011-11-03T10:00:00 Last Updated: 2024-08-07T00:01:51.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676. Additional Analyst Notes: - CVE Program Container: References: - http://www.ark-web.jp/movabletype/a-form/docs/security_patch.html - http://www.ark-web.jp/movabletype/blog/2011/09/aform_update110927.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/70405
CVE ID: CVE-2011-4275 State: PUBLISHED Published: 2011-11-26T02:00:00 Last Updated: 2024-08-07T00:01:51.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in iTop (aka IT Operations Portal) 1.1.181 and 1.2.0-RC-282 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted company name, (2) a crafted database server name, (3) a crafted CSV file, (4) a crafted copy-and-paste action, (5) the auth_user parameter in a suggest_pwd action to UI.php, (6) the c[menu] parameter to UniversalSearch.php, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an
hp, (7) the description parameter in a SearchFormToAdd_document_list action to UI.php, (8) the category parameter in an errors action to audit.php, or (9) the suggest_pwd parameter to UI.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/520632 - http://www.securityfocus.com/archive/1/520632/100/0/threaded - http://www.tele-consulting.com/advisories/TC-SA-2011-02.txt
CVE ID: CVE-2011-4276 State: PUBLISHED Published: 2012-01-25T18:00:00Z Last Updated: 2024-09-16T22:14:06.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth service (com/android/phone/BluetoothHeadsetService.java) in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/android/issues/detail?id=21347
CVE ID: CVE-2011-4277 State: PUBLISHED Published: 2011-11-03T17:00:00Z Last Updated: 2024-09-16T23:01:35.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HTML via a crafted name of an object within a more object on a wiki page. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/901251
CVE ID: CVE-2011-4278 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170003 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=fd29b2ad1c20906da00d7e523f39bc8a0358a65b
CVE ID: CVE-2011-4279 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via vectors involving use of a search engine, as demonstrated by the search functionality of Google, Yahoo!, Wrensoft Zoom, MSN, Yandex, and AltaVista. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170004 - http://git.moo
http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170004 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=81b58cc227cf96a1cd2e002cc210b7b3e376fd17
CVE ID: CVE-2011-4280 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=bd654f0ced8af925c27b7c94321f0c299b50b38e - http://moodle.org/mod/forum/discuss.php?d=170005
CVE ID: CVE-2011-4281 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170006 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455
CVE ID: CVE-2011-4282 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) sort or (2) show parameter. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170008 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=73de6fa06f6923278950a445bd69b3fbc1e518d2
CVE ID: CVE-2011-4283 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170009 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=6fde0dac702b3d0954bd1c34d427944e9cd89ae6
CVE ID: CVE-2011-4284 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile (aka My profile) block by visiting a user-context page. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170010 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=0ab727fb35e5ae1d8316d96c6752ee9ebec4c185
CVE ID: CVE-2011-4285 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=170011 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=5cfe8aecb8b78e343ded38ba9e7a0a859887d21c
CVE ID: CVE-2011-4286 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) Flash Video (aka FLV) files and (2) YouTube videos. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f81bfd412c6b2e93a5b15711727d5cb7cc78336 - http
rity/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f81bfd412c6b2e93a5b15711727d5cb7cc78336 - http://moodle.org/mod/forum/discuss.php?d=170012
CVE ID: CVE-2011-4287 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/uploaduser_form.php in Moodle 2.0.x before 2.0.3 does not force password changes for autosubscribed users, which makes it easier for remote attackers to obtain access by leveraging knowledge of the initial password of a new user. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=22a77963439e00441949440f0517135b3a5418da - http://moodle.org/mod/forum/discuss.php?d=175588
CVE ID: CVE-2011-4288 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=79c6e3a0968ee1fedcf8a1f14f8086fcd9dbd3f6 - http://moodle.org/mod/forum/discuss.php?d=175590
CVE ID: CVE-2011-4289 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=175591 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=181991e791a13a3c383234718c26c499e31d3df1
CVE ID: CVE-2011-4290 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in lib/weblib.php in Moodle 1.9.x before 1.9.12 allow remote attackers to inject arbitrary web script or HTML via vectors related to URL encoding. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=5a3010310bff0b3946804a72ca2d6bc166a0028f - http://moodle.org/mod/forum/discuss.php?d=175592
CVE ID: CVE-2011-4291 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted ratings operations. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=175593 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=34b5e856b0c98aab3f5317119093628df0834957
CVE ID: CVE-2011-4292 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=175594 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=acb4688d29a7cc028803ee3d81edc7f1b6515c64
CVE ID: CVE-2011-4293 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and JavaScript content, which allows remote attackers to bypass intended access restrictions and write to an operating-system temporary directory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=182736 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e1
011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=182736 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=e1c2a211f259821910be2cba23679d4176fb00a3
CVE ID: CVE-2011-4294 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The error-message functionality in Moodle 1.9.x before 1.9.13, 2.0.x before 2.0.4, and 2.1.x before 2.1.1 does not ensure that a continuation link refers to an http or https URL for the local Moodle instance, which might allow attackers to trick users into visiting arbitrary web sites via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f9f666c902cb30ef6f519353f38c45a29fdf4a6 - http:/
ty/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=8f9f666c902cb30ef6f519353f38c45a29fdf4a6 - http://moodle.org/mod/forum/discuss.php?d=182737
CVE ID: CVE-2011-4295 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which allows remote authenticated users to gain privileges by making a role assignment. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=d20f655d59cd486fd9b3a26ad353af13daafd1d3 - http://moodle.org/mod/forum/discuss.php?d=182738
CVE ID: CVE-2011-4296 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/db/access.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 assigns incorrect capabilities to the course-creator role, which allows remote authenticated users to modify course filters by leveraging this role. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://moodle.org/mod/forum/discuss.php?d=182739 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=88d823c1f491a3c74f67bbf74306a8d1109dee02
CVE ID: CVE-2011-4297 State: PUBLISHED Published: 2012-07-16T10:00:00 Last Updated: 2024-08-07T00:01:51.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2011/11/14/1 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9da3c2efadcc5f56cb8adc19c67ed16be35780f3 - http://moodle.org/mod/forum/discuss.php?d=182740
CVE ID: CVE-2011-4298 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-09-16T23:16:27.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=188309 - https://bugzilla.redhat.com/show_bug.cgi?id=747444 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=48346fb11f8ced06a05c0618b02a3a925b34ec59
CVE ID: CVE-2011-4299 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-09-17T01:26:09.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=188310 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4300 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attackers to obtain potentially sensitive information via a request for a file. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f6b07c4da54a9db24723beb147e8a19a3d487e00 - http://moodle.org/mod/forum/discuss.php?d=188311 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4301 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=188313 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f1f70bd4dde6cd1ea4bdb8ab28fa3d36a53b89d8 - https://bugzilla.
8313 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f1f70bd4dde6cd1ea4bdb8ab28fa3d36a53b89d8 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4302 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=188314 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=54941685e3e86ec085641dcb7ebb1f96f06735b2 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4303 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=188315 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=ca896fdfcfcc87846fa91a297d0aa6999a68c48a - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4304 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=d0157d827bc254ba386a5e5b41b13be2698ee76e - http://moodle.org/mod/forum/discuss.php?d=188316 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4305 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshing. Additional Analyst Notes: - CVE Program Container: References: - http://moodle.org/mod/forum/discuss.php?d=188318 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=97f258fabb3ebfa7acc7c02cb59de92b01710f99 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4306 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=4a2acd8c7e6c869d5fd5aa686e6e0a3f20c97f15 - http://moodle.org/mod/forum/discuss.php?d=188319 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4307 State: PUBLISHED Published: 2012-07-11T10:00:00Z Last Updated: 2024-08-07T00:01:51.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=41017112cff7f5bd7969c72d321320f3090e7c68 - http://moodle.org/mod/forum/discuss.php?d=188321 - https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE ID: CVE-2011-4308 State: PUBLISHED Published: 2012-07-11T10:00:00 Last Updated: 2024-08-07T00:01:51.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://git.moodle.org/gw?p=moodle.git&a=search&s=MDL-28615 - http://moodle.org/mod/forum/discuss.php?d=188322 - http://www.debian.org/security/2012/dsa-2421 - https://bugzilla.redhat.com/show_bug.cgi?id=747444