SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-slUpgrade moodle-msUpgrade moodle-ltUpgrade moodle-caUpgrade moodle-koUpgrade moodle-huUpgrade moodle-elUpgrade moodle-srUpgrade moodle-arUpgrade moodle-heUpgrade moodle-deUpgrade moodle-daUpgrade moodle-euUpgrade moodle-soUpgrade moodle-mi_tnUpgrade moodle-svUpgrade moodle-knUpgrade moodle-skUpgrade moodle-noUpgrade moodle-gaUpgrade moodle-hiUpgrade moodle-faUpgrade moodle-idUpgrade moodle-glUpgrade moodle-itUpgrade moodle-hrUpgrade moodle-nnUpgrade moodle-zh_cnUpgrade moodle-ruUpgrade moodle-tlUpgrade moodle-csUpgrade moodle-kaUpgrade moodle-beUpgrade moodle-fiUpgrade moodle-sqUpgrade moodle-ukUpgrade moodle-afUpgrade moodle-bsUpgrade moodle-ptUpgrade moodle-de_duUpgrade moodle-roUpgrade moodle-frUpgrade moodle-trUpgrade moodle-bgUpgrade moodle-nlUpgrade moodle-jaUpgrade moodle-kmUpgrade moodle-esUpgrade moodle-plUpgrade moodleUpgrade moodle-etUpgrade moodle-viUpgrade moodle-lvUpgrade moodle-thUpgrade moodle-is | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub