Lucene search
China National Vulnerability DatabaseCNVD-2022-09258HistoryJan 26, 2022 - 12:00 a.m.
Moodle SQL Injection Vulnerability (CNVD-2022-09258)
2022-01-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
20
0.002 Low
EPSS
Percentile
62.3%
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. SQL injection vulnerabilities exist in Moodle 3.11 through 3.11.4, which stem from insufficient cleanup of user-supplied data in the h5p active Web service responsible for obtaining user attempt data. An attacker could exploit this vulnerability to execute illegal SQL commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Moodle Moodle >=3.11.0， | lt | 3.11.5 |
Related
openvas
openvas
Moodle 3.11.x < 3.11.5 SQLi Vulnerability (MSA-22-0001)
2022-01-26 00:00:00
cve
cve
CVE-2022-0332
2022-01-25 20:15:08
ubuntucve
ubuntucve
CVE-2022-0332
2022-01-25 00:00:00
veracode
veracode
SQL Injection
2022-01-26 04:23:24
osv
osv
CVE-2022-0332
2022-01-25 20:15:08
SQL injection in Moodle
2022-01-28 22:08:14
BIT-moodle-2022-0332
2024-03-06 11:06:13
cvelist
cvelist
CVE-2022-0332
2022-01-25 19:11:10
prion
prion
Sql injection
2022-01-25 20:15:00
nvd
nvd
CVE-2022-0332
2022-01-25 20:15:08
packetstorm
packetstorm
Moodle 3.11.4 SQL Injection
2022-02-02 00:00:00
github
github
SQL injection in Moodle
2022-01-28 22:08:14
zdt
zdt
Moodle 3.11.4 - SQL Injection Vulnerability
2022-02-02 00:00:00
githubexploit
githubexploit
Exploit for SQL Injection in Moodle
2022-01-25 23:58:17
exploitdb
exploitdb
Moodle 3.11.4 - SQL Injection
2022-02-02 00:00:00
nessus
nessus
Moodle 3.11.x < 3.11.5 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.10.x < 3.10.9 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.12 Multiple Vulnerabilities
2023-02-20 00:00:00
redos
redos
ROS-20230627-01
2023-06-27 00:00:00