Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
146377 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.100569
Categoría:Web application abuses
Título:Moodle 1.8.x < 1.8.12, 1.9.x < 1.9.8 Multiple Vulnerabilities
Resumen:Moodle is prone to multiple vulnerabilities.
Descripción:Summary:
Moodle is prone to multiple vulnerabilities.

Vulnerability Insight:
The following flaws exist:

- multiple cross-site scripting issues

- a security-bypass issue

- an information-disclosure issue

- multiple SQL-injection issues

- an HTML-injection issue

- a session-fixation issue

Vulnerability Impact:
Attackers can exploit these issues to bypass certain security
restrictions, obtain sensitive information, perform unauthorized actions, compromise the
application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Other attacks may also be possible.

Affected Software/OS:
Moodle versions 1.8.x prior to 1.8.12 and 1.9.x prior to
1.9.8.

Solution:
Updates are available. Please see the references for more
information.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2010-1619
SuSE Security Announcement: SUSE-SR:2010:011 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
http://www.vupen.com/english/advisories/2010/1107
Common Vulnerability Exposure (CVE) ID: CVE-2010-1618
Common Vulnerability Exposure (CVE) ID: CVE-2010-1617
Common Vulnerability Exposure (CVE) ID: CVE-2010-1616
http://tracker.moodle.org/browse/MDL-16658
Common Vulnerability Exposure (CVE) ID: CVE-2010-1615
Common Vulnerability Exposure (CVE) ID: CVE-2010-1614
Common Vulnerability Exposure (CVE) ID: CVE-2010-1613
CopyrightCopyright (C) 2010 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.