Description

comment/lib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not properly restrict comment capabilities, which allows remote attackers to post a comment by leveraging the guest role and operating on a front-page activity.

Remediation

References

CVE-2011-4297

Related Vulnerabilities

WordPress Plugin UnGallery Local File Disclosure (1.5.8)

PHP Other Vulnerability (CVE-2006-4481)

WordPress Plugin Time Sheets Cross-Site Scripting (1.4.2)

Oracle Application Server CVE-2008-2589 Vulnerability (CVE-2008-2589)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2149)

Severity

Medium

Classification

CVE-2011-4297 CWE-264

Tags

Missing Update Known Vulnerabilities