Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 23:12:38 +0000 certa-2013-avi-052 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. La majorité concernent des fuite… https://cve.radiocsirt.org/vuln/certa-2013-avi-052 certa-2013-avi-052 https://cve.radiocsirt.org/vuln/certa-2013-avi-052 EUVD-2026-182767 https://cve.radiocsirt.org/vuln/euvd-2026-182767 EUVD-2026-182767 https://cve.radiocsirt.org/vuln/euvd-2026-182767 fkie_cve-2012-6099 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6099 <p>The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.</p> <p>The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-6099 GHSA-cr78-rphw-w73p — Moodle Arbitrary File Read via Backup Functionality https://cve.radiocsirt.org/vuln/ghsa-cr78-rphw-w73p <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.</p> https://cve.radiocsirt.org/vuln/ghsa-cr78-rphw-w73p gsd-2012-6099 https://cve.radiocsirt.org/vuln/gsd-2012-6099 gsd-2012-6099 https://cve.radiocsirt.org/vuln/gsd-2012-6099 Withdrawn: UBUNTU-CVE-2012-6099 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-6099 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: moodle</p> <p>The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: moodle</p> <p>The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-6099