Description

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.

Remediation

References

CVE-2006-4938

Related Vulnerabilities

Oracle JRE CVE-2022-21624 Vulnerability (CVE-2022-21624)

Joomla! Core 3.0.x Denial of Service (3.0.0 - 3.0.3)

Angular Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4231)

PHP Observable Discrepancy Vulnerability (CVE-2024-2408)

WordPress Plugin QueryWall:Plug'n Play Firewall Cross-Site Scripting (1.1.0)

Severity

Medium

Classification

CVE-2006-4938

Tags

Missing Update Known Vulnerabilities