CVE

Id
44814  
CVE No.
CVE-2010-2230  
Status
Candidate  
Description
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.  
Phase
Assigned (20100609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489557 44814 CVE-2010-2230 MLIST:[oss-security] 20100621 Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities  View
489558 44814 CVE-2010-2230 URL:http://www.openwall.com/lists/oss-security/2010/06/21/2  View
489559 44814 CVE-2010-2230 CONFIRM:http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114&r2=1.812.2.115  View
489560 44814 CVE-2010-2230 CONFIRM:http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171&r2=1.970.2.172  View
489561 44814 CVE-2010-2230 CONFIRM:http://docs.moodle.org/en/Moodle_1.8.13_release_notes  View
489562 44814 CVE-2010-2230 CONFIRM:http://docs.moodle.org/en/Moodle_1.9.9_release_notes  View
489563 44814 CVE-2010-2230 CONFIRM:http://moodle.org/mod/forum/discuss.php?d=152368  View
489564 44814 CVE-2010-2230 CONFIRM:http://tracker.moodle.org/browse/MDL-22042  View
489565 44814 CVE-2010-2230 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=605809  View
489566 44814 CVE-2010-2230 FEDORA:FEDORA-2010-10286  View
489567 44814 CVE-2010-2230 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html  View
489568 44814 CVE-2010-2230 FEDORA:FEDORA-2010-10291  View
489569 44814 CVE-2010-2230 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html  View
489570 44814 CVE-2010-2230 FEDORA:FEDORA-2010-10321  View
489571 44814 CVE-2010-2230 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html  View
489572 44814 CVE-2010-2230 SUSE:SUSE-SR:2010:014  View
489573 44814 CVE-2010-2230 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html  View
489574 44814 CVE-2010-2230 SECUNIA:40248  View
489575 44814 CVE-2010-2230 URL:http://secunia.com/advisories/40248  View
489576 44814 CVE-2010-2230 SECUNIA:40352  View
489577 44814 CVE-2010-2230 URL:http://secunia.com/advisories/40352  View
489578 44814 CVE-2010-2230 VUPEN:ADV-2010-1530  View
489579 44814 CVE-2010-2230 URL:http://www.vupen.com/english/advisories/2010/1530  View
489580 44814 CVE-2010-2230 VUPEN:ADV-2010-1571  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38346 JVNDB-2010-004131 Apache CouchDB におけるクロスサイトリクエストフォージェリの脆弱性 Apache CouchDB には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2010-2234 44814 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004131.html  View