Description

admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability.

Remediation

References

CVE-2012-2359

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1691)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-6289)

WordPress Plugin Consulting Elementor Widgets SQL Injection (1.3.0)

LimeSurvey Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4628)

WordPress Plugin Automated Registration of the Course Multiple Cross-Site Scripting Vulnerabilities (1.0)

Severity

Medium

Classification

CVE-2012-2359 CWE-264

Tags

Missing Update Known Vulnerabilities