The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-de_duUpgrade moodle-esUpgrade moodle-jaUpgrade moodle-zh_cnUpgrade moodle-fiUpgrade moodle-trUpgrade moodle-etUpgrade moodleUpgrade moodle-sqUpgrade moodle-msUpgrade moodle-thUpgrade moodle-ptUpgrade moodle-kaUpgrade moodle-lvUpgrade moodle-caUpgrade moodle-isUpgrade moodle-kmUpgrade moodle-beUpgrade moodle-bgUpgrade moodle-afUpgrade moodle-csUpgrade moodle-daUpgrade moodle-tlUpgrade moodle-koUpgrade moodle-ukUpgrade moodle-gaUpgrade moodle-plUpgrade moodle-soUpgrade moodle-frUpgrade moodle-faUpgrade moodle-ltUpgrade moodle-noUpgrade moodle-mi_tnUpgrade moodle-viUpgrade moodle-svUpgrade moodle-roUpgrade moodle-srUpgrade moodle-bsUpgrade moodle-hiUpgrade moodle-hrUpgrade moodle-nlUpgrade moodle-arUpgrade moodle-deUpgrade moodle-itUpgrade moodle-huUpgrade moodle-slUpgrade moodle-skUpgrade moodle-elUpgrade moodle-idUpgrade moodle-heUpgrade moodle-nnUpgrade moodle-glUpgrade moodle-ruUpgrade moodle-euUpgrade moodle-kn | Feb 17, 2015 | Dec 15, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub