Description

backup/moodle2/restore_stepslib.php in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not check for the moodle/course:changeidnumber privilege during handling of course ID numbers, which allows remote authenticated users to overwrite ID numbers via a restore action.

Remediation

References

CVE-2011-4589

Related Vulnerabilities

PHP Other Vulnerability (CVE-2007-1718)

WordPress Plugin yolink Search for WordPress 'bulkcrawl.php' SQL Injection (1.1.4)

Lighttpd Other Vulnerability (CVE-2007-1870)

WordPress Plugin Stop User Enumeration User Enumeration (1.2.4)

Joomla! Core 3.x.x Information Disclosure (3.0.0 - 3.9.19)

Severity

Medium

Classification

CVE-2011-4589 CWE-264

Tags

Missing Update Known Vulnerabilities