Vulnerabilities > Moodle > Moodle > 1.5.0

DATE CVE VULNERABILITY TITLE RISK
2006-09-23 CVE-2006-4938 Unspecified vulnerability in Moodle
help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.
network
low complexity
moodle
4.0
2006-09-23 CVE-2006-4937 Unspecified vulnerability in Moodle
lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages.
network
low complexity
moodle
4.0
2006-09-23 CVE-2006-4936 Improper Input Validation vulnerability in Moodle
Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.
network
low complexity
moodle CWE-20
critical
10.0
2006-09-23 CVE-2006-4935 Improper Input Validation vulnerability in Moodle
The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.
network
low complexity
moodle CWE-20
critical
10.0