CVE-2016-0725

EUVD-2022-3962
Cross-site scripting (XSS) vulnerability in the search_pagination function in course/classes/management_renderer.php in Moodle 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted search string.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
moodlemoodle
2.8.0
moodlemoodle
2.8.1
moodlemoodle
2.8.2
moodlemoodle
2.8.3
moodlemoodle
2.8.4
moodlemoodle
2.8.5
moodlemoodle
2.8.6
moodlemoodle
2.8.7
moodlemoodle
2.8.8
moodlemoodle
2.8.9
moodlemoodle
2.9.0
moodlemoodle
2.9.1
moodlemoodle
2.9.2
moodlemoodle
2.9.3
moodlemoodle
3.0.0
moodlemoodle
3.0.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
moodle
precise
not-affected
trusty
dne
vivid
not-affected
wily
not-affected
Common Weakness Enumeration
References
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html
http://www.openwall.com/lists/oss-security/2016/01/18/1
http://www.securitytracker.com/id/1034694
https://moodle.org/mod/forum/discuss.php?d=326206
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52552
http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html
http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html
http://www.openwall.com/lists/oss-security/2016/01/18/1
http://www.securitytracker.com/id/1034694
https://moodle.org/mod/forum/discuss.php?d=326206