Description

Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page.

Remediation

References

CVE-2008-3325

Related Vulnerabilities

Drupal Other Vulnerability (CVE-2007-0658)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7740)

Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2017-7659)

Joomla Other Vulnerability (CVE-2007-4184)

PHP Out-of-bounds Write Vulnerability (CVE-2016-5399)

Severity

Medium

Classification

CVE-2008-3325 CWE-352

Tags

Missing Update Known Vulnerabilities