Description

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

Remediation

References

CVE-2006-4936

Related Vulnerabilities

Nginx Integer Overflow or Wraparound Vulnerability (CVE-2017-20005)

WordPress Plugin Powerhouse Museum Collection Image Grid 'tbpv_username' Parameter Cross-Site Scripting (0.9.1.1)

Wordpress Plugin Backup Migration Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-6972)

WordPress Plugin EELV Newsletter Multiple Vulnerabilities (4.6)

WordPress CVE-2011-4899 Vulnerability (CVE-2011-4899)

Severity

Critical

Classification

CVE-2006-4936 CWE-20

Tags

Missing Update Known Vulnerabilities