https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-28T04:19:23.508231+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10935 bdu:2015-10935 2026-10-28T04:19:23.617224+00:00 bdu:2015-10935 https://cve.radiocsirt.org/vuln/cnvd-2015-01041 cnvd-2015-01041 2026-10-28T04:19:23.617261+00:00 cnvd-2015-01041 https://cve.radiocsirt.org/vuln/euvd-2026-90333 EUVD-2026-90333 2026-10-28T04:19:23.617276+00:00 EUVD-2026-90333 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1493 fkie_cve-2015-1493 2026-10-28T04:19:23.617288+00:00

Directory traversal vulnerability in the min_get_slash_argument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter, as demonstrated by reading PHP scripts.

 https://cve.radiocsirt.org/vuln/ghsa-gphj-63h8-r9vq GHSA-gphj-63h8-r9vq — Moodle directory traversal vulnerability 2026-10-28T04:19:23.617354+00:00

Affected: Packagist: moodle/moodle

Directory traversal vulnerability in the min_get_slash_argument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter, as demonstrated by reading PHP scripts.

 https://cve.radiocsirt.org/vuln/gsd-2015-1493 gsd-2015-1493 2026-10-28T04:19:23.617382+00:00 gsd-2015-1493 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1493 Withdrawn: UBUNTU-CVE-2015-1493 2026-10-28T04:19:23.617394+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle

Directory traversal vulnerability in the min_get_slash_argument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter, as demonstrated by reading PHP scripts.