Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. (CVE-2007-3215)

Nigel McNie discovered that fetching https URLs did not correctly escape shell meta-characters. An authenticated remote attacker could execute arbitrary commands as the web server user, if curl was installed and configured. (CVE-2008-4796, MSA-09-0003)

It was discovered that Smarty (also included in Moodle), did not correctly filter certain inputs. An authenticated remote attacker could exploit this to execute arbitrary PHP commands as the web server user. (CVE-2008-4810, CVE-2008-4811, CVE-2009-1669)

It was discovered that the unused SpellChecker extension in Moodle did not correctly handle temporary files. If the tool had been locally modified, it could be made to overwrite arbitrary local files via symlinks. (CVE-2008-5153)

Mike Churchward discovered that Moodle did not correctly filter Wiki page titles in certain areas. An authenticated remote attacker could exploit this to cause cross-site scripting (XSS), which could be used to modify or steal confidential data of other users within the same web domain. (CVE-2008-5432, MSA-08-0022)

It was discovered that the HTML sanitizer, 'Login as' feature, and logging in Moodle did not correctly handle certain inputs. An authenticated remote attacker could exploit this to generate XSS, which could be used to modify or steal confidential data of other users within the same web domain. (CVE-2008-5619, CVE-2009-0500, CVE-2009-0502, MSA-08-0026, MSA-09-0004, MSA-09-0007)

It was discovered that the HotPot module in Moodle did not correctly filter SQL inputs. An authenticated remote attacker could execute arbitrary SQL commands as the moodle database user, leading to a loss of privacy or denial of service. (CVE-2008-6124, MSA-08-0010)

Kevin Madura discovered that the forum actions and messaging settings in Moodle were not protected from cross-site request forgery (CSRF).
If an authenticated user were tricked into visiting a malicious website while logged into Moodle, a remote attacker could change the user's configurations or forum content. (CVE-2009-0499, MSA-09-0008, MSA-08-0023)

Daniel Cabezas discovered that Moodle would leak usernames from the Calendar Export tool. A remote attacker could gather a list of users, leading to a loss of privacy. (CVE-2009-0501, MSA-09-0006)

Christian Eibl discovered that the TeX filter in Moodle allowed any function to be used. An authenticated remote attacker could post a specially crafted TeX formula to execute arbitrary TeX functions, potentially reading any file accessible to the web server user, leading to a loss of privacy. (CVE-2009-1171, MSA-09-0009)

Johannes Kuhn discovered that Moodle did not correctly validate user permissions when attempting to switch user accounts. An authenticated remote attacker could switch to any other Moodle user, leading to a loss of privacy. (MSA-08-0003)

Hanno Boeck discovered that unconfigured Moodle instances contained XSS vulnerabilities. An unauthenticated remote attacker could exploit this to modify or steal confidential data of other users within the same web domain. (MSA-08-0004)

Debbie McDonald, Mauno Korpelainen, Howard Miller, and Juan Segarra Montesinos discovered that when users were deleted from Moodle, their profiles and avatars were still visible. An authenticated remote attacker could exploit this to store information in profiles even after they were removed, leading to spam traffic. (MSA-08-0015, MSA-09-0001, MSA-09-0002)

Lars Vogdt discovered that Moodle did not correctly filter certain inputs. An authenticated remote attacker could exploit this to generate XSS from which they could modify or steal confidential data of other users within the same web domain. (MSA-08-0021)

It was discovered that Moodle did not correctly filter inputs for group creation, mnet, essay question, HOST param, wiki param, and others. An authenticated remote attacker could exploit this to generate XSS from which they could modify or steal confidential data of other users within the same web domain. (MDL-9288, MDL-11759, MDL-12079, MDL-12793, MDL-14806)

It was discovered that Moodle did not correctly filter SQL inputs when performing a restore. An attacker authenticated as a Moodle administrator could execute arbitrary SQL commands as the moodle database user, leading to a loss of privacy or denial of service.
(MDL-11857).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

moodle was prone to several cross-site-scripting (XSS) and cross-site-request-forgery (CSRF) problems (CVE-2009-0499, CVE-2009-0500, CVE-2009-0501, CVE-2009-0502).

Multiple security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

リモートホストにインストールされているMoodleのバージョン内の「forum」コードは、フォーラム投稿を削除する前に、リクエストを適切に検証できないために、クロスサイトリクエストフォージェリの脆弱性の影響を受けます。攻撃者がMoodleユーザーを騙して悪意のあるリンクをクリックさせることができれば、この問題がユーザーの投稿の削除に利用される可能性があります。

このインストールは、任意コード実行を可能にするものを含む、他の複数の脆弱性の影響も受ける可能性がありますが、Nessusではそれらを確認していないことに注意してください。

遠端主機上安裝的 Moodle 版本中的 'forum' 程式碼受到一個跨網站要求偽造弱點影響，這是因為在刪除論壇貼文之前無法正確驗證要求。如果攻擊者可誘騙 Moodle 使用者按一下惡意連結，便可利用此問題刪除使用者的貼文。

請注意，此安裝也可能受到其他若干弱點影響，包括其中一個允許上傳任意檔案的弱點；但 Nessus 尚未對此進行檢查。

The 'forum' code in the version of Moodle installed on the remote host is affected by a cross-site request forgery vulnerability due to a failure to properly validate requests before deleting forum posts. If an attacker can trick a Moodle user into clicking on a malicious link, this issue could be leveraged to delete the user's posts.

Note that this install is also likely affected by several other vulnerabilities, including one allowing for arbitrary code execution, although Nessus has not checked for them.

ID	名稱	產品	系列	已發布	已更新	嚴重性
39516	Ubuntu 8.04 LTS / 8.10 : moodle vulnerabilities (USN-791-1)	Nessus	Ubuntu Local Security Checks	2009/6/25	2021/1/19	critical
40276	openSUSE Security Update : moodle (moodle-672)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	medium
35671	Fedora 9 : moodle-1.9.4-1.fc9 (2009-1641)	Nessus	Fedora Local Security Checks	2009/2/13	2021/1/11	medium
35749	Moodleフォーラム「post.php」の認証されていない投稿削除CSRF	Nessus	CGI abuses	2009/2/27	2024/6/6	medium
35749	Moodle Forum 'post.php' 未經授權貼文刪除 CSRF	Nessus	CGI abuses	2009/2/27	2024/6/6	medium
40069	openSUSE Security Update : moodle (moodle-672)	Nessus	SuSE Local Security Checks	2009/7/21	2021/1/14	medium
36008	openSUSE 10 Security Update : moodle (moodle-6108)	Nessus	SuSE Local Security Checks	2009/3/24	2021/1/14	medium
35749	Moodle Forum 'post.php' Unauthorized Post Deletion CSRF	Nessus	CGI abuses	2009/2/27	2024/6/6	medium
37466	Fedora 10 : moodle-1.9.4-1.fc10 (2009-1699)	Nessus	Fedora Local Security Checks	2009/4/23	2021/1/11	medium

偵測

搜尋 Plugin

critical

medium

medium

medium

medium

medium

medium

medium

medium