vulnerability

FreeBSD: VID-a430e15d-f93f-11e5-92ce-002590263bf5 (CVE-2016-2151): moodle -- multiple vulnerabilities

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Apr 3, 2016
Added
Dec 10, 2025
Modified
Dec 10, 2025

Description

Marina Glancy reports: MSA-16-0003: Incorrect capability check when displaying users emails in Participants list MSA-16-0004: XSS from profile fields from external db MSA-16-0005: Reflected XSS in mod_data advanced search MSA-16-0006: Hidden courses are shown to students in Event Monitor MSA-16-0007: Non-Editing Instructor role can edit exclude checkbox in Single View MSA-16-0008: External function get_calendar_events return events that pertains to hidden activities MSA-16-0009: CSRF in Assignment plugin management page MSA-16-0010: Enumeration of category details possible without authentication MSA-16-0011: Add no referrer to links with _blank target attribute MSA-16-0012: External function mod_assign_save_submission does not check due dates

Solutions

freebsd-upgrade-package-moodle28freebsd-upgrade-package-moodle29freebsd-upgrade-package-moodle30
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.