SQL injection vulnerability in mod/feedback/complete.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to execute arbitrary SQL commands via crafted form data.
Max CVSS
6.5
EPSS Score
0.20%
Published
2012-07-23
Updated
2020-12-01
SQL injection vulnerability in calendar/event.php in the calendar implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated users to execute arbitrary SQL commands via a crafted calendar event.
Max CVSS
6.5
EPSS Score
0.12%
Published
2012-07-21
Updated
2020-12-01
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.
Max CVSS
4.0
EPSS Score
0.22%
Published
2012-07-16
Updated
2020-12-01
3 vulnerabilities found