Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Remediation

References

CVE-2009-4297

Related Vulnerabilities

WordPress Plugin WP w3all phpBB Multiple Unspecified Vulnerabilities (1.6.3)

WordPress Plugin RokMicroNews Multiple Vulnerabilities (1.5)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.27)

Drupal Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-28949)

WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (2.0.9)

Severity

Medium

Classification

CVE-2009-4297 CWE-352

Tags

Missing Update Known Vulnerabilities