NVD

Id
13713  
Name
CVE-2010-2230  
Description
The KSES text cleaning filter in lib/weblib.php in Moodle before 1.8.13 and 1.9.x before 1.9.9 does not properly handle vbscript URIs, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks via HTML input.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-06-28  
Modified Date
2010-09-09  
Seq
2010-2230  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76216 13713 CVE-2010-2230 http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.812.2.114&r2=1.812.2.115  View
76217 13713 CVE-2010-2230 http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.171&r2=1.970.2.172  View
76218 13713 CVE-2010-2230 http://docs.moodle.org/en/Moodle_1.8.13_release_notes  View
76219 13713 CVE-2010-2230 http://docs.moodle.org/en/Moodle_1.9.9_release_notes  View
76220 13713 CVE-2010-2230 FEDORA-2010-10286  View
76221 13713 CVE-2010-2230 FEDORA-2010-10291  View
76222 13713 CVE-2010-2230 FEDORA-2010-10321  View
76223 13713 CVE-2010-2230 SUSE-SR:2010:014  View
76224 13713 CVE-2010-2230 http://moodle.org/mod/forum/discuss.php?d=152368  View
76225 13713 CVE-2010-2230 http://tracker.moodle.org/browse/MDL-22042  View
76226 13713 CVE-2010-2230 [oss-security] 20100621 Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities  View
76227 13713 CVE-2010-2230 ADV-2010-1530  View
76228 13713 CVE-2010-2230 ADV-2010-1571  View
76229 13713 CVE-2010-2230 https://bugzilla.redhat.com/show_bug.cgi?id=605809  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39076 JVNDB-2010-004861 Moodle の KSES テキストクリーニングフィルタにおけるクロスサイトスクリプティングの脆弱性 Moodle の lib/weblib.php の KSES テキストクリーニングフィルタは、vbscript URI を適切に処理しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2010-2230 44810 CVE-2010-2230 13713 4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004861.html 2010-06-17 2012-09-25 View