Description

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page.

Remediation

References

CVE-2010-1617

Related Vulnerabilities

WordPress Plugin Membership 2 Unspecified Vulnerability (4.0.0.2)

WordPress Plugin Nmedia WordPress Member Conversation 'doupload.php' Arbitrary File Upload (1.3)

MySQL CVE-2018-2586 Vulnerability (CVE-2018-2586)

Apache HTTP Server Other Vulnerability (CVE-2003-0987)

RubyGems Cryptographic Issues Vulnerability (CVE-2012-2126)

Severity

Medium

Classification

CVE-2010-1617 CWE-264

Tags

Missing Update Known Vulnerabilities