Lucene search
Veracode Vulnerability DatabaseVERACODE:4827HistoryJul 30, 2017 - 10:12 p.m.
Cross-site Scripting (XSS)
2017-07-3022:12:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.004
Percentile
74.6%
Moodle is vulnerable to cross-site scripting (XSS) attacks. These attacks are possible because the Skype ID profile field is not sanitized.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-45683
openwall.com/lists/oss-security/2014/07/21/1
osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xss/
osvdb.org/show/osvdb/109337
packetstormsecurity.com/files/127624/Moodle-2.7-Cross-Site-Scripting.html
www.exploit-db.com/exploits/34169
www.securityfocus.com/bid/68756
github.com/moodle/moodle/commit/ce5a785b0962c3c94c7a7b0d36176482d21db95d
moodle.org/mod/forum/discuss.php?d=264265
www.exploit-db.com/exploits/34169/
Related
packetstorm
packetstorm
Moodle 2.7 Cross Site Scripting
2014-07-25 00:00:00
ubuntucve
ubuntucve
CVE-2014-3544
2014-07-29 00:00:00
exploitdb
exploitdb
Moodle 2.7 - Persistent Cross-Site Scripting
2014-07-27 00:00:00
cve
cve
CVE-2014-3544
2014-07-29 11:10:32
prion
prion
Cross site scripting
2014-07-29 11:10:00
github
github
Moodle cross-site scripting (XSS) vulnerability
2022-05-13 01:12:40
nvd
nvd
CVE-2014-3544
2014-07-29 11:10:32
osv
osv
Moodle cross-site scripting (XSS) vulnerability
2022-05-13 01:12:40
cvelist
cvelist
CVE-2014-3544
2014-07-29 10:00:00
nessus
nessus
Moodle < 2.4 / 2.4.x < 2.4.11 / 2.5.x < 2.5.7 / 2.6.x < 2.6.4 / 2.7.x < 2.7.1 Multiple Vulnerabilities
2015-04-20 00:00:00
Fedora 20 : moodle-2.5.7-1.fc20 (2014-8601)
2014-07-31 00:00:00
Fedora 19 : moodle-2.4.11-1.fc19 (2014-8609)
2014-07-31 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0308)
2022-01-28 00:00:00
Fedora Update for moodle FEDORA-2014-15102
2014-11-26 00:00:00
Fedora Update for moodle FEDORA-2014-10802
2014-10-01 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-08-06 00:08:48
fedora
fedora
[SECURITY] Fedora 20 Update: moodle-2.5.9-1.fc20
2014-11-25 15:30:01
[SECURITY] Fedora 20 Update: moodle-2.5.7-1.fc20
2014-07-30 07:03:13
[SECURITY] Fedora 20 Update: moodle-2.5.8-1.fc20
2014-09-25 10:46:26