Moodle Prior to 1.9.12/2.0.3 Multiple Security Vulnerabilities
BID:47920
Info
Moodle Prior to 1.9.12/2.0.3 Multiple Security Vulnerabilities
| Bugtraq ID: | 47920 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 19 2011 12:00AM |
| Updated: | May 19 2011 12:00AM |
| Credit: | Sam Hemelryk, Panagiotis Petasis, Petr Škoda and Claire Browne |
| Vulnerable: |
Moodle Moodle 2.0.2 Moodle Moodle 2.0.1 Moodle Moodle 1.9.11 Moodle Moodle 1.9.10 Moodle moodle 1.9.9 Moodle moodle 1.9.8 Moodle Moodle 1.9.7 Moodle moodle 1.9.6 Moodle Moodle 1.9.5 Moodle moodle 1.9.4 Moodle moodle 1.9.3 Moodle Moodle 1.9.1 Moodle Moodle 2.0 Moodle Moodle 1.9.2 Moodle Moodle 1.9 |
| Not Vulnerable: |
Moodle Moodle 2.0.3 Moodle Moodle 1.9.12 |
Discussion
Moodle Prior to 1.9.12/2.0.3 Multiple Security Vulnerabilities
Moodle is prone to multiple security vulnerabilities, including:
1. Multiple security-bypass vulnerabilities.
2. Multiple cross-site scripting vulnerabilities.
3. An information-disclosure vulnerability.
4. An insecure-permissions vulnerability.
Attackers can exploit these issues to bypass certain security restrictions, obtain sensitive information, perform unauthorized actions, and compromise the application. Other attacks may also be possible.
These issues affect Moodle versions prior to 1.9.12 and 2.0.3.
Moodle is prone to multiple security vulnerabilities, including:
1. Multiple security-bypass vulnerabilities.
2. Multiple cross-site scripting vulnerabilities.
3. An information-disclosure vulnerability.
4. An insecure-permissions vulnerability.
Attackers can exploit these issues to bypass certain security restrictions, obtain sensitive information, perform unauthorized actions, and compromise the application. Other attacks may also be possible.
These issues affect Moodle versions prior to 1.9.12 and 2.0.3.
Exploit / POC
Moodle Prior to 1.9.12/2.0.3 Multiple Security Vulnerabilities
An attacker can use a browser to exploit these issues. In some cases, the attacker entices an unsuspecting user to follow a malicious URI.
An attacker can use a browser to exploit these issues. In some cases, the attacker entices an unsuspecting user to follow a malicious URI.
Solution / Fix
Moodle Prior to 1.9.12/2.0.3 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Moodle Prior to 1.9.12/2.0.3 Multiple Security Vulnerabilities
References:
References:
- Moodle Homepage (Moodle)
- Moodle Security Advisory (Moodle)