Approved changes feed: RSS · Atom

cpe:2.3:a:moodle:moodle:1.7.0:*:*:*:*:*:*:*

part: a version: 1.7.0 update: *

VendorMoodle (1f527b56-744d-5be6-b0f4-b691bd50b8c3)
ProductMoodle (221dc9da-2dde-53d2-a358-e0cb5ac858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bitnami/moodle purl2cpe 2026-06-01 10:13:14.067773
pkg:github/moodle/moodle purl2cpe 2026-06-01 10:13:14.067775
pkg:rpm/fedora/moodle purl2cpe 2026-06-01 10:13:14.067776
pkg:rpm/opensuse/moodle purl2cpe 2026-06-01 10:13:14.067777

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0502 vulnerable 2026-06-08 04:51:09.765816 Details available
Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the "Login as" feature is used to visit a MyMoodle or Blog page.
Published: 2009-02-10T02:00:00.000Z
Updated: 2024-08-07T04:40:03.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5432 vulnerable 2026-06-08 04:50:51.522020 Details available
Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title).
Published: 2008-12-11T15:00:00.000Z
Updated: 2024-08-07T10:56:45.892Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.