CVE-2009-4298

2009-12-16T01:30:00
ID CVE-2009-4298
Type cve
Reporter cve@mitre.org
Modified 2009-12-16T05:00:00

Description

The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors.