CVE-2009-4305
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an “escaping issue when processing AICC CRS file (Course_Title).”
Affected configurations
References
docs.moodle.org/en/Moodle_1.8.11_release_notes
docs.moodle.org/en/Moodle_1.9.7_release_notes
moodle.org/mod/forum/discuss.php?d=139120
secunia.com/advisories/37614
www.securityfocus.com/bid/37244
www.vupen.com/english/advisories/2009/3455
www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html
www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html
www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html
Related
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%