Description

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.

Remediation

References

CVE-2006-4938

Related Vulnerabilities

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2021-32027)

WordPress Plugin Simple Slideshow Manager Multiple Unspecified Vulnerabilities (2.1)

phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15734)

Apache 2.x version older than 2.0.63

WordPress Plugin Admin Bar User Switching Cross-Site Scripting (1.0.4)

Severity

Medium

Classification

CVE-2006-4938

Tags

Missing Update Known Vulnerabilities