Description

backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.

Remediation

References

CVE-2006-4939

Related Vulnerabilities

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-7838)

ZenCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-6985)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)

WordPress Plugin Smart Slideshow 'upload.php' Arbitrary File Upload (2.1)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4544)

Severity

Medium

Classification

CVE-2006-4939

Tags

Missing Update Known Vulnerabilities