PublicDate: 2006-09-14 10:07:00 UTC
Candidate: CVE-2006-4784
References: 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4784
Description:
 Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and
 earlier might allow remote attackers to inject arbitrary web script or HTML
 via unspecified parameters to (1) doc/index.php or (2) files/index.php.
Ubuntu-Description: 
Notes: 
Bugs: 
Priority: low
Discovered-by:
Assigned-to:
CVSS:

upstream_moodle: released (1.6.2)
dapper_moodle: ignored (reached end-of-life)
edgy_moodle: not-affected (1.6.2-1ubuntu1.1)
feisty_moodle: not-affected (1.6.3-2ubuntu1)
gutsy_moodle: not-affected (1.8.2-1)
hardy_moodle: not-affected (1.8.2-1)
intrepid_moodle: not-affected (1.8.2-1)
jaunty_moodle: not-affected (1.8.2-1)
karmic_moodle: not-affected (1.8.2-1)
devel_moodle: not-affected (1.8.2-1)