Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 22:34:03 +0000 certa-2013-avi-052 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. La majorité concernent des fuite… https://cve.radiocsirt.org/vuln/certa-2013-avi-052 certa-2013-avi-052 https://cve.radiocsirt.org/vuln/certa-2013-avi-052 EUVD-2026-113437 https://cve.radiocsirt.org/vuln/euvd-2026-113437 EUVD-2026-113437 https://cve.radiocsirt.org/vuln/euvd-2026-113437 fkie_cve-2012-6112 https://cve.radiocsirt.org/vuln/fkie_cve-2012-6112 <p>classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.</p> <p>classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-6112 GHSA-fx5h-3786-h2w6 — PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests https://cve.radiocsirt.org/vuln/ghsa-fx5h-3786-h2w6 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.</p> https://cve.radiocsirt.org/vuln/ghsa-fx5h-3786-h2w6 gsd-2012-6112 https://cve.radiocsirt.org/vuln/gsd-2012-6112 gsd-2012-6112 https://cve.radiocsirt.org/vuln/gsd-2012-6112 UBUNTU-CVE-2012-6112 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-6112 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tinymce, Ubuntu:18.04:LTS: tinymce, Ubuntu:20.04:LTS: tinymce</p> <p>classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tinymce, Ubuntu:18.04:LTS: tinymce, Ubuntu:20.04:LTS: tinymce</p> <p>classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-6112