Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 3, 2018 | Feb 10, 2009 |
| Suse | — | Upgrade moodle-fiUpgrade moodle-daUpgrade moodle-ruUpgrade moodle-skUpgrade moodle-thUpgrade moodle-arUpgrade moodle-bsUpgrade moodle-kmUpgrade moodle-nnUpgrade moodle-csUpgrade moodle-plUpgrade moodle-ptUpgrade moodle-beUpgrade moodle-hrUpgrade moodle-jaUpgrade moodle-lvUpgrade moodle-viUpgrade moodle-bgUpgrade moodleUpgrade moodle-kaUpgrade moodle-caUpgrade moodle-afUpgrade moodle-srUpgrade moodle-elUpgrade moodle-faUpgrade moodle-msUpgrade moodle-hiUpgrade moodle-mi_tnUpgrade moodle-trUpgrade moodle-koUpgrade moodle-gaUpgrade moodle-deUpgrade moodle-heUpgrade moodle-glUpgrade moodle-huUpgrade moodle-roUpgrade moodle-esUpgrade moodle-frUpgrade moodle-ukUpgrade moodle-tlUpgrade moodle-de_duUpgrade moodle-noUpgrade moodle-sqUpgrade moodle-svUpgrade moodle-ltUpgrade moodle-soUpgrade moodle-knUpgrade moodle-nlUpgrade moodle-idUpgrade moodle-itUpgrade moodle-etUpgrade moodle-slUpgrade moodle-euUpgrade moodle-zh_cnUpgrade moodle-is | Feb 17, 2015 | Feb 9, 2009 |
| Ubuntu | — | Upgrade moodle | Nov 8, 2024 | Feb 10, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub