Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the add_to_log function in mod/wiki/view.php in the wiki module, or (2) "data validation in some forms elements" related to lib/form/selectgroups.php.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-skUpgrade moodle-itUpgrade moodle-idUpgrade moodle-daUpgrade moodle-knUpgrade moodle-deUpgrade moodle-isUpgrade moodle-nlUpgrade moodle-nnUpgrade moodle-sqUpgrade moodle-ukUpgrade moodle-elUpgrade moodle-zh_cnUpgrade moodle-hiUpgrade moodle-trUpgrade moodle-kmUpgrade moodle-tlUpgrade moodle-noUpgrade moodle-viUpgrade moodle-bsUpgrade moodle-de_duUpgrade moodle-mi_tnUpgrade moodle-heUpgrade moodle-slUpgrade moodle-gaUpgrade moodle-srUpgrade moodle-lvUpgrade moodle-plUpgrade moodle-hrUpgrade moodle-euUpgrade moodle-faUpgrade moodle-soUpgrade moodle-fiUpgrade moodle-jaUpgrade moodle-bgUpgrade moodleUpgrade moodle-ltUpgrade moodle-arUpgrade moodle-frUpgrade moodle-kaUpgrade moodle-ptUpgrade moodle-beUpgrade moodle-huUpgrade moodle-ruUpgrade moodle-esUpgrade moodle-koUpgrade moodle-svUpgrade moodle-glUpgrade moodle-etUpgrade moodle-csUpgrade moodle-thUpgrade moodle-afUpgrade moodle-msUpgrade moodle-roUpgrade moodle-ca | Feb 17, 2015 | Apr 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub