Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.

Remediation

References

CVE-2011-4281

Related Vulnerabilities

MySQL CVE-2021-2072 Vulnerability (CVE-2021-2072)

Handlebars Other Vulnerability (CVE-2021-23383)

PHP Other Vulnerability (CVE-2007-1718)

Joomla! Core 2.5.x Cross-Site Scripting (2.5.0 - 2.5.3)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9035)

Severity

Medium

Classification

CVE-2011-4281 CWE-352

Tags

Missing Update Known Vulnerabilities