Description

Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address.

Remediation

References

CVE-2012-0795

Related Vulnerabilities

WordPress Plugin oQey Headers 'oqey_settings.php' SQL Injection (0.3)

Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.11)

Zenphoto Improper Privilege Management Vulnerability (CVE-2018-0610)

WordPress Plugin Page Restrict Cross-Site Scripting (2.2.1)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4290)

Severity

Medium

Classification

CVE-2012-0795 CWE-20

Tags

Missing Update Known Vulnerabilities