Description

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

Remediation

References

CVE-2016-3733

Related Vulnerabilities

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17858)

WordPress Plugin Product Slider For WooCommerce Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.5)

WordPress Plugin DukaPress TimThumb Arbitrary File Upload (2.3.2)

WordPress Plugin WP Photo Album Plus Unspecified Vulnerability (6.5.00)

Oracle Database Server CVE-2019-2582 Vulnerability (CVE-2019-2582)

Severity

Medium

Classification

CVE-2016-3733 CWE-284 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities