Description

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."

Remediation

References

CVE-2009-4305

Related Vulnerabilities

WordPress Plugin ARI Adminer-WordPress Database Manager Cross-Site Request Forgery (1.1.13)

WordPress Plugin Tabs-Responsive Tabs with WooCommerce Product Tab Extension Security Bypass (3.6.0)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6316)

jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-18405)

WordPress Plugin WordPress Content Slide Multiple Vulnerabilities (1.4.2)

Severity

Medium

Classification

CVE-2009-4305 CWE-138

Tags

Missing Update Known Vulnerabilities