Description

mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 allows remote authenticated users to discover the username of a wiki creator by visiting the history and deletion user interface.

Remediation

References

CVE-2011-4581

Related Vulnerabilities

Rukovoditel Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2022-48175)

WordPress Plugin MukioPlayer SQL Injection (1.6)

WordPress Plugin Import Legacy Media Cross-Site Scripting (0.1)

WordPress Plugin Cleeng-Sell your videos Cross-Site Scripting (2.3.2)

WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Cross-Site Scripting (2.0.12)

Severity

Medium

Classification

CVE-2011-4581 CWE-200

Tags

Missing Update Known Vulnerabilities