LeakIX - Host elearning.vergidegundem.com

Domain elearning.vergidegundem.com

Türkiye

Superonline Iletisim Hizmetleri A.S.

Ubuntu

Software information

Apache Apache 2.4.52

tcp/443

Moodle is vulnerable
The following Moodle application is publicly accessible and looks out-dated :

It is highly recommended to update to a safe version as soon as possible since multiple CVEs allow remote attackers to craft XSS attacks leading to code execution on the server.

If the application was already patched, reloading the web server to clear the PHP opcache will fix issue.

Reference:

https://www.cvedetails.com/cve/CVE-2023-30943
IP: 176.235.222.79
Domain: elearning.vergidegundem.com
Port: 443
URL: https://elearning.vergidegundem.com

First seen 2024-02-18 17:06
Last seen 2024-12-22 04:38
Open for 307 days
- Severity: high
  Fingerprint: 0b591a20d83e9bbda3370ce58008084480080844800808448008084480080844
```
Found vulnerable Moodle application:
Affected by CVE-2023-30943
```
  Found on 2024-12-22 04:38
Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-12-22 04:38

HTTP/1.1 200 OK
Date: Sun, 22 Dec 2024 04:38:55 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=fbrq4n3aa7juq1ueal6nhjdlfk; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Sun, 22 Dec 2024 04:38:55 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 6 hours ago by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-12-20 05:10

HTTP/1.1 200 OK
Date: Fri, 20 Dec 2024 05:10:03 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=j2im1002am3iv1rb31stfbncqe; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Fri, 20 Dec 2024 05:10:03 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2 days ago by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-12-19 03:10

HTTP/1.1 200 OK
Date: Thu, 19 Dec 2024 03:10:07 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=qdphk29rjd28ue3a6gtpm5uf69; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Thu, 19 Dec 2024 03:10:07 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-12-19 by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-12-14 15:49

HTTP/1.1 200 OK
Date: Sat, 14 Dec 2024 15:49:23 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=b8udl1ssav0fhi4ae3cdshlp9a; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Sat, 14 Dec 2024 15:49:23 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-12-14 by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-12-12 18:27

HTTP/1.1 200 OK
Date: Thu, 12 Dec 2024 18:27:33 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=0unhri39uqh12rgojoksem8t1k; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Thu, 12 Dec 2024 18:27:33 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-12-12 by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-12-03 05:02

HTTP/1.1 200 OK
Date: Tue, 03 Dec 2024 05:02:08 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=bfflr1vnd64k02977jeudrgcu1; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Tue, 03 Dec 2024 05:02:08 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-12-03 by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-11-30 23:39

HTTP/1.1 200 OK
Date: Sat, 30 Nov 2024 23:39:50 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=603g3ai18ggv17lhek9ft9c6if; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Sat, 30 Nov 2024 23:39:50 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-11-30 by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-11-28 22:41

HTTP/1.1 200 OK
Date: Thu, 28 Nov 2024 22:42:00 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=ees7m0n1fkd3u1skb23tv4b5ht; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Thu, 28 Nov 2024 22:42:00 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-11-28 by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-11-27 00:31

HTTP/1.1 200 OK
Date: Wed, 27 Nov 2024 00:31:37 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=m4j25l5dbgc1sbifts1hlesq8r; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Wed, 27 Nov 2024 00:31:37 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-11-27 by HttpPlugin

Create report

Open service 176.235.222.79:443 · elearning.vergidegundem.com

2024-11-20 16:20

HTTP/1.1 200 OK
Date: Wed, 20 Nov 2024 16:20:59 GMT
Server: Apache/2.4.52 (Ubuntu)
Set-Cookie: MoodleSession=lhcp59187n4ler1c1jvcr4qf8e; path=/; secure
Expires: Mon, 20 Aug 1969 09:23:00 GMT
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Content-Language: tr
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-UA-Compatible: IE=edge
Last-Modified: Wed, 20 Nov 2024 16:20:59 GMT
Accept-Ranges: none
X-Frame-Options: sameorigin
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8

Found 2024-11-20 by HttpPlugin

Create report

elearning.vergidegundem.comwww.elearning.vergidegundem.com

Fingerprint:

cc808dbb275d4c393188b3d55f1188b055bd22998a9cea8f965761cbd1f702d0

CN:

elearning.vergidegundem.com

Key:

RSA-2048

Issuer:

Sectigo RSA Domain Validation Secure Server CA

Not before:

2024-02-18 00:00

Not after:

2025-03-20 23:59

Domain summary

elearning.vergidegundem.com 10

1 recorded

IP summary

176.235.222.79 2

1 recorded

Domain elearning.vergidegundem.com

Türkiye

Software information

Moodle is vulnerable

elearning.vergidegundem.comwww.elearning.vergidegundem.com

Domain summary

IP summary