Description

Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file.

Remediation

References

CVE-2014-0126

Related Vulnerabilities

MySQL CVE-2012-0578 Vulnerability (CVE-2012-0578)

WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts Cross-Site Scripting (2.1.49)

WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (6.8.1)

Python Resource Management Errors Vulnerability (CVE-2011-1521)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3092)

Severity

Medium

Classification

CVE-2014-0126 CWE-352

Tags

Missing Update Known Vulnerabilities