Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Remediation

References

CVE-2009-4297

Related Vulnerabilities

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.29)

WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress Insecure Direct Object Reference (1.0.30)

osCommerce Other Vulnerability (CVE-2003-1219)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3393)

OpenSSL Resource Management Errors Vulnerability (CVE-2016-0798)

Severity

Medium

Classification

CVE-2009-4297 CWE-352

Tags

Missing Update Known Vulnerabilities