الباحثون
رجوع
Dan Marsden
#25500
من 60,587
10.5
إجمالي CVSS
الثغرات
·
2
متوسطة
2
PT-2013-3620
2013-07-21
4.0
CVE-2013-2245
Moodle
Moodle
The issue concerns the improper implementation of RSS tokens for impersonation in the rss/file.php script. This allows remote authenticated users to obtain sensitive block information by reading an RSS feed.
PT-2012-4688
2012-07-23
6.5
CVE-2012-3395
Moodle
Moodle
The issue allows remote authenticated users to execute arbitrary SQL commands via crafted form data. This is a result of a SQL injection vulnerability in the mod/feedback/complete.php file.