Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the add_to_log function in mod/wiki/view.php in the wiki module, or (2) "data validation in some forms elements" related to lib/form/selectgroups.php.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-koUpgrade moodle-kaUpgrade moodle-frUpgrade moodle-soUpgrade moodle-bgUpgrade moodle-roUpgrade moodle-esUpgrade moodleUpgrade moodle-lvUpgrade moodle-ptUpgrade moodle-thUpgrade moodle-jaUpgrade moodle-euUpgrade moodle-caUpgrade moodle-ruUpgrade moodle-csUpgrade moodle-fiUpgrade moodle-plUpgrade moodle-beUpgrade moodle-gaUpgrade moodle-glUpgrade moodle-huUpgrade moodle-srUpgrade moodle-hrUpgrade moodle-ltUpgrade moodle-faUpgrade moodle-etUpgrade moodle-svUpgrade moodle-afUpgrade moodle-arUpgrade moodle-msUpgrade moodle-isUpgrade moodle-hiUpgrade moodle-kmUpgrade moodle-noUpgrade moodle-de_duUpgrade moodle-skUpgrade moodle-idUpgrade moodle-itUpgrade moodle-elUpgrade moodle-trUpgrade moodle-zh_cnUpgrade moodle-knUpgrade moodle-heUpgrade moodle-viUpgrade moodle-slUpgrade moodle-daUpgrade moodle-mi_tnUpgrade moodle-sqUpgrade moodle-bsUpgrade moodle-tlUpgrade moodle-nlUpgrade moodle-nnUpgrade moodle-deUpgrade moodle-uk | Feb 17, 2015 | Apr 29, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub