VDB
CVE-2016-2152
CVE-2016-2152
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an external DB profile field.
EPSS 0.22% · 45.1th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
0.22%
45.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| moodle | moodle | 0, 2.7.1, 2.7.2 |
| moodle | moodle | 2.7, 2.8, 2.9 |
| n/a | n/a | n/a |
Timeline
- Mar 21, 2016 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- https://moodle.org/mod/forum/discuss.php?d=330178 advisory
- https://moodle.org/mod/forum/discuss.php?d=330174 advisory
- https://moodle.org/mod/forum/discuss.php?d=330180 advisory
- https://moodle.org/mod/forum/discuss.php?d=330173 advisory
- https://moodle.org/mod/forum/discuss.php?d=330177 advisory
- https://moodle.org/mod/forum/discuss.php?d=330176 advisory
- https://moodle.org/mod/forum/discuss.php?d=330181 advisory
- https://moodle.org/mod/forum/discuss.php?d=330175 advisory
- https://moodle.org/mod/forum/discuss.php?d=330182 advisory
- https://moodle.org/mod/forum/discuss.php?d=330179 advisory
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705 url
- [oss-security] 20160321 moodle security release mailing-list
- 1035333 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2016-2152 advisory
- https://github.com/moodle/moodle/commit/3b214760fb51ae2b0c85bbb2b272b9bc7c164657 url
- https://github.com/moodle/moodle/commit/4db8407d3eaba17a8d3f81957b8e93e9f2554055 url
- https://github.com/moodle/moodle/commit/4ee7394c8bfa95a63428385b542c2066cd2d8ea1 url
- https://github.com/moodle/moodle/commit/54d6ee8c0874d72705ffa4c7c17d7c90bc16c897 url
- https://github.com/moodle/moodle/commit/61da84e4148aa1de83a6389eb77abf3bbf09a349 url
- https://github.com/moodle/moodle/commit/82d0c0b5218e9ceb35a4e24b4a4e1e2e9cfc840c url
…and 5 more