Description

Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role.

Remediation

References

CVE-2011-4288

Related Vulnerabilities

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Security Bypass (2.9.16)

Apache HTTP Server CVE-2018-11763 Vulnerability (CVE-2018-11763)

WordPress Plugin WP-Testimonials SQL Injection (3.4.1)

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Security Bypass (2.2.5)

WordPress Plugin Ditty WordPress-Responsive Slider, List, and Ticker Display Cross-Site Scripting (3.0.14)

Severity

Medium

Classification

CVE-2011-4288 CWE-264

Tags

Missing Update Known Vulnerabilities