Moodle is prone to multiple vulnerabilities including cross-site request-forgery, security bypass, information-disclosure and SQL- injection issues. Attackers can exploit these issues to bypass certain security restrictions, gain access to sensitive information, perform unauthorized actions, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. These issues affect Moodle versions prior to 1.8.11 and 1.9.7.

Updates are available. Please see the references for more information.

• http://moodle.org/security/
• http://www.moodle.org
• http://www.securityfocus.com/bid/37244

---

Updated on 2015-03-25