Description

backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.

Remediation

References

CVE-2006-4939

Related Vulnerabilities

Apache Tomcat CVE-2017-5651 Vulnerability (CVE-2017-5651)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Vulnerabilities (1.5.34)

e107 Other Vulnerability (CVE-2004-2262)

Oracle JRE CVE-2013-0423 Vulnerability (CVE-2013-0423)

MODX Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-9069)

Severity

Medium

Classification

CVE-2006-4939

Tags

Missing Update Known Vulnerabilities