Description

The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address restrictions via an XMLRPC request.

Remediation

References

CVE-2011-4588

Related Vulnerabilities

Liferay DXP Improper Certificate Validation Vulnerability (CVE-2022-42131)

WordPress Plugin WP eCommerce Multiple Cross-Site Scripting and SQL Injection Vulnerabilities (3.8.9)

PrestaShop Improper Authentication Vulnerability (CVE-2021-21308)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18358)

Oracle Database Server CVE-2014-4295 Vulnerability (CVE-2014-4295)

Severity

Medium

Classification

CVE-2011-4588 CWE-264

Tags

Missing Update Known Vulnerabilities