Cross-site scripting (XSS) vulnerability in the MNET access-control interface in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via vectors involving extended characters in a username.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Jun 28, 2010 |
| Suse | — | Upgrade moodle-jaUpgrade moodle-csUpgrade moodleUpgrade moodle-hrUpgrade moodle-itUpgrade moodle-noUpgrade moodle-bsUpgrade moodle-tlUpgrade moodle-kmUpgrade moodle-nlUpgrade moodle-arUpgrade moodle-deUpgrade moodle-viUpgrade moodle-ukUpgrade moodle-kaUpgrade moodle-sqUpgrade moodle-plUpgrade moodle-ptUpgrade moodle-thUpgrade moodle-fiUpgrade moodle-frUpgrade moodle-srUpgrade moodle-roUpgrade moodle-etUpgrade moodle-msUpgrade moodle-hiUpgrade moodle-skUpgrade moodle-de_duUpgrade moodle-bgUpgrade moodle-svUpgrade moodle-lvUpgrade moodle-trUpgrade moodle-daUpgrade moodle-koUpgrade moodle-knUpgrade moodle-heUpgrade moodle-slUpgrade moodle-afUpgrade moodle-idUpgrade moodle-mi_tnUpgrade moodle-huUpgrade moodle-ltUpgrade moodle-euUpgrade moodle-isUpgrade moodle-zh_cnUpgrade moodle-faUpgrade moodle-ruUpgrade moodle-glUpgrade moodle-elUpgrade moodle-soUpgrade moodle-nnUpgrade moodle-caUpgrade moodle-beUpgrade moodle-esUpgrade moodle-ga | Feb 17, 2015 | Jun 28, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub