SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-knUpgrade moodle-noUpgrade moodle-faUpgrade moodle-arUpgrade moodle-svUpgrade moodle-hiUpgrade moodle-idUpgrade moodle-elUpgrade moodle-ruUpgrade moodle-itUpgrade moodle-huUpgrade moodle-gaUpgrade moodle-euUpgrade moodle-daUpgrade moodle-skUpgrade moodle-tlUpgrade moodle-msUpgrade moodle-koUpgrade moodle-soUpgrade moodle-mi_tnUpgrade moodle-nnUpgrade moodle-srUpgrade moodle-deUpgrade moodle-slUpgrade moodle-caUpgrade moodle-heUpgrade moodle-ltUpgrade moodle-zh_cnUpgrade moodle-hrUpgrade moodle-glUpgrade moodle-frUpgrade moodle-isUpgrade moodle-fiUpgrade moodle-jaUpgrade moodle-roUpgrade moodle-esUpgrade moodle-ukUpgrade moodle-plUpgrade moodle-lvUpgrade moodle-etUpgrade moodle-ptUpgrade moodle-csUpgrade moodle-thUpgrade moodle-sqUpgrade moodle-kaUpgrade moodle-trUpgrade moodle-viUpgrade moodle-beUpgrade moodle-bsUpgrade moodleUpgrade moodle-afUpgrade moodle-de_duUpgrade moodle-kmUpgrade moodle-nlUpgrade moodle-bg | Feb 17, 2015 | Dec 15, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub