https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T09:02:39.998155+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-530 certa-2013-avi-530 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Elles permettent à un attaquant… 2026-10-16T09:02:40.002678+00:00 certa-2013-avi-530 https://cve.radiocsirt.org/vuln/euvd-2026-183461 EUVD-2026-183461 2026-10-16T09:02:40.002733+00:00 EUVD-2026-183461 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4313 fkie_cve-2013-4313 2026-10-16T09:02:40.002751+00:00

Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remote attackers to conduct SQL injection attacks against Microsoft SQL Server via a crafted string.

 https://cve.radiocsirt.org/vuln/ghsa-gxf9-5xr3-34cc GHSA-gxf9-5xr3-34cc 2026-10-16T09:02:40.002787+00:00

Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remote attackers to conduct SQL injection attacks against Microsoft SQL Server via a crafted string.

 https://cve.radiocsirt.org/vuln/gsd-2013-4313 gsd-2013-4313 2026-10-16T09:02:40.002804+00:00 gsd-2013-4313 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4313 Withdrawn: UBUNTU-CVE-2013-4313 2026-10-16T09:02:40.002815+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: moodle

Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remote attackers to conduct SQL injection attacks against Microsoft SQL Server via a crafted string.