Description

The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.

Remediation

References

CVE-2012-5480

Related Vulnerabilities

Joomla! Core 2.5.x Remote File Inclusion (2.5.4 - 2.5.25)

WordPress Plugin NextGEN Gallery-WordPress Gallery Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities (1.8.3)

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5865)

MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000208)

WordPress Plugin EmbedStories-Display social media stories Cross-Site Scripting (0.7.4)

Severity

Medium

Classification

CVE-2012-5480 CWE-264

Tags

Missing Update Known Vulnerabilities