Description

SQL injection vulnerability in the hotpot_delete_selected_attempts function in report.php in the HotPot module in Moodle 1.6 before 1.6.7, 1.7 before 1.7.5, 1.8 before 1.8.6, and 1.9 before 1.9.2 allows remote attackers to execute arbitrary SQL commands via a crafted selected attempt.

Remediation

References

CVE-2008-6124

Related Vulnerabilities

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple Vulnerabilities (8.0.8)

WordPress Plugin Double Opt-In for Download SQL Injection (2.0.8)

WordPress Plugin GlotPress Information Disclosure (2.2.1)

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-27947)

Oracle Application Server Other Vulnerability (CVE-2005-1383)

Severity

High

Classification

CVE-2008-6124 CWE-138

Tags

Missing Update Known Vulnerabilities