Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Jan 12, 2008 |
| Suse | — | Upgrade moodle-lvUpgrade moodle-srUpgrade moodle-bgUpgrade moodle-etUpgrade moodle-itUpgrade moodle-beUpgrade moodle-frUpgrade moodle-kmUpgrade moodle-plUpgrade moodle-nlUpgrade moodle-sqUpgrade moodle-tlUpgrade moodle-daUpgrade moodle-ruUpgrade moodle-kaUpgrade moodle-arUpgrade moodle-ptUpgrade moodle-skUpgrade moodle-deUpgrade moodle-jaUpgrade moodle-ukUpgrade moodleUpgrade moodle-afUpgrade moodle-roUpgrade moodle-thUpgrade moodle-viUpgrade moodle-csUpgrade moodle-hrUpgrade moodle-bsUpgrade moodle-fiUpgrade moodle-euUpgrade moodle-isUpgrade moodle-noUpgrade moodle-faUpgrade moodle-trUpgrade moodle-elUpgrade moodle-hiUpgrade moodle-nnUpgrade moodle-slUpgrade moodle-caUpgrade moodle-heUpgrade moodle-knUpgrade moodle-de_duUpgrade moodle-mi_tnUpgrade moodle-koUpgrade moodle-glUpgrade moodle-msUpgrade moodle-esUpgrade suse-releaseUpgrade moodle-ltUpgrade moodle-soUpgrade moodle-idUpgrade moodle-huUpgrade moodle-svUpgrade moodle-gaUpgrade moodle-zh_cn | Feb 17, 2015 | Jan 11, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub