Lucene search
Veracode Vulnerability DatabaseVERACODE:4587HistoryJul 18, 2017 - 8:03 a.m.
Cross-site Scripting (XSS)
2017-07-1808:03:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.002
Percentile
60.3%
Moodle is vulnerable to cross-site scripting (XSS) attacks. The attacks exist because lib/classes/event/user_login_failed.php does not escape the user-supplied username before returning it to the description during invalid login-attempt. This allows a malicious user to inject and execute arbitrary code through the username parameter.
Related
nvd
nvd
CVE-2014-3549
2014-07-29 11:10:32
ubuntucve
ubuntucve
CVE-2014-3549
2014-07-29 00:00:00
prion
prion
Cross site scripting
2014-07-29 11:10:00
cve
cve
CVE-2014-3549
2014-07-29 11:10:32
cvelist
cvelist
CVE-2014-3549
2014-07-29 10:00:00
nessus
nessus
Moodle 2.7.x < 2.7.1 XSS
2015-04-20 00:00:00
Fedora 20 : moodle-2.5.7-1.fc20 (2014-8601)
2014-07-31 00:00:00
Fedora 19 : moodle-2.4.11-1.fc19 (2014-8609)
2014-07-31 00:00:00
openvas
openvas
Fedora Update for moodle FEDORA-2014-15102
2014-11-26 00:00:00
Fedora Update for moodle FEDORA-2014-10802
2014-10-01 00:00:00
Fedora Update for moodle FEDORA-2014-8601
2014-08-05 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: moodle-2.5.9-1.fc20
2014-11-25 15:30:01
[SECURITY] Fedora 20 Update: moodle-2.5.7-1.fc20
2014-07-30 07:03:13
[SECURITY] Fedora 20 Update: moodle-2.5.8-1.fc20
2014-09-25 10:46:26