Identifier Related Record Severity Date Published Description Versions Affected
CVE-2015-3175 Medium Jun 01, 2015 Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-3174 Low Jun 01, 2015 mod/quiz/db/access.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not set the RISK_XSS bit for grade more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2273 Low Jun 01, 2015 Cross-site scripting (XSS) vulnerability in mod/quiz/report/statistics/statistics_question_table.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2272 Medium Jun 01, 2015 login/token.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass a f more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2271 Medium Jun 01, 2015 tag/user.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/tag:flag capability b more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2270 Medium Jun 01, 2015 lib/moodlelib.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4, when the theme uses the blocks-regions featu more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2269 Low Jun 01, 2015 Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2. more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2268 Medium Jun 01, 2015 filter/urltolink/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users t more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2267 Medium Jun 01, 2015 mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intende more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7
CVE-2015-2266 Medium Jun 01, 2015 message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmess more...
2.5.5, 2.4.9, 2.6.2, 2.6.1, 2.4.8, 2.5.4, 2.3.11, 2.5.3, 2.3.10, 2.4.7