Description

Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the add_to_log function in mod/wiki/view.php in the wiki module, or (2) "data validation in some forms elements" related to lib/form/selectgroups.php.

Remediation

References

CVE-2010-1615

Related Vulnerabilities

WordPress Plugin SendGrid Cross-Site Scripting (1.10.7)

MySQL CVE-2020-14547 Vulnerability (CVE-2020-14547)

Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2021-38268)

Oracle Database Server Other Vulnerability (CVE-2001-0833)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-0783)

Severity

High

Classification

CVE-2010-1615 CWE-138

Tags

Missing Update Known Vulnerabilities