Description

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.

Remediation

References

CVE-2012-2356

Related Vulnerabilities

WordPress Plugin Attached images title editor Cross-Site Scripting (1.1.1)

PHP 5.3.9 remote code execution

WordPress Plugin Justified Gallery Cross-Site Scripting (1.7.0)

MySQL CVE-2021-35625 Vulnerability (CVE-2021-35625)

Python Integer Overflow or Wraparound Vulnerability (CVE-2015-1283)

Severity

Medium

Classification

CVE-2012-2356 CWE-264

Tags

Missing Update Known Vulnerabilities