Description

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.

Remediation

References

CVE-2009-4299

Related Vulnerabilities

Apache Tomcat Improper Input Validation Vulnerability (CVE-2013-2185)

PHP Out-of-bounds Read Vulnerability (CVE-2017-9118)

Joomla! Core Cross-Site Scripting (2.5.0 - 3.9.24)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12625)

Drupal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2017-6928)

Severity

Medium

Classification

CVE-2009-4299 CWE-264

Tags

Missing Update Known Vulnerabilities