# CVEs published 2013-03-25

8 CVEs were published on March 25, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1829](https://cve.now/CVE-2013-1829.md): calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscript (no CVSS)
- [CVE-2013-1830](https://cve.now/CVE-2013-1830.md): user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforpro (no CVSS, moodle/moodle)
- [CVE-2013-1831](https://cve.now/CVE-2013-1831.md): lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain (no CVSS, moodle/moodle)
- [CVE-2013-1832](https://cve.now/CVE-2013-1832.md): repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 includes the WebDAV p (no CVSS, moodle/moodle)
- [CVE-2013-1833](https://cve.now/CVE-2013-1833.md): Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before (no CVSS, moodle/moodle)
- [CVE-2013-1834](https://cve.now/CVE-2013-1834.md): notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows rem (no CVSS, moodle/moodle)
- [CVE-2013-1835](https://cve.now/CVE-2013-1835.md): Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obta (no CVSS, moodle/moodle)
- [CVE-2013-1836](https://cve.now/CVE-2013-1836.md): Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV rep (no CVSS, moodle/moodle)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
