https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:00:25.527855+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2018-avi-441 certfr-2018-avi-441 — De multiples vulnérabilités ont été découvertes dans Moodle . Elles permettent à un attaquant de provoquer une exécutio… 2026-10-03T09:00:25.531964+00:00 certfr-2018-avi-441 https://cve.radiocsirt.org/vuln/cnvd-2018-19547 cnvd-2018-19547 2026-10-03T09:00:25.531999+00:00 cnvd-2018-19547 https://cve.radiocsirt.org/vuln/euvd-2026-67073 EUVD-2026-67073 2026-10-03T09:00:25.532015+00:00 EUVD-2026-67073 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14630 fkie_cve-2018-14630 2026-10-03T09:00:25.532027+00:00

moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.

 https://cve.radiocsirt.org/vuln/ghsa-c3pr-h96w-2jjg GHSA-c3pr-h96w-2jjg — Moodle XML import of ddwtos could lead to intentional remote code execution 2026-10-03T09:00:25.532054+00:00

Affected: Packagist: moodle/moodle

moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.

 https://cve.radiocsirt.org/vuln/gsd-2018-14630 gsd-2018-14630 2026-10-03T09:00:25.532080+00:00 gsd-2018-14630 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-14630 UBUNTU-CVE-2018-14630 2026-10-03T09:00:25.532092+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing legacy 'drag and drop into text' (ddwtos) type quiz questions, it was possible to inject and execute PHP code from within the imported questions, either intentionally or by importing questions from an untrusted source.