Description

The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address restrictions via an XMLRPC request.

Remediation

References

CVE-2011-4588

Related Vulnerabilities

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.22)

Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-24400)

Oracle JRE CVE-2020-2655 Vulnerability (CVE-2020-2655)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-4049)

WordPress Plugin Leaky Paywall PHP Object Injection (4.9.1)

Severity

Medium

Classification

CVE-2011-4588 CWE-264

Tags

Missing Update Known Vulnerabilities