Lucene search

RedhatCVE-2011-4301

HistoryJul 11, 2012 - 10:26 a.m.

CVE-2011-4301

2012-07-1110:26:10

redhat

web.nvd.nist.gov

moodle

quickform

forms library

vulnerability

remote attackers

form content

cve-2011-4301

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

71.0%

JSON

The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields.

Affected configurations

Nvd

Node

moodlemoodleMatch1.9.2

moodlemoodleMatch1.9.3

moodlemoodleMatch1.9.4

moodlemoodleMatch1.9.5

moodlemoodleMatch1.9.6

moodlemoodleMatch1.9.7

moodlemoodleMatch1.9.8

moodlemoodleMatch1.9.9

moodlemoodleMatch1.9.10

moodlemoodleMatch1.9.11

moodlemoodleMatch1.9.12

moodlemoodleMatch1.9.13

moodlemoodleMatch2.0.0

moodlemoodleMatch2.0.1

moodlemoodleMatch2.0.2

moodlemoodleMatch2.0.3

moodlemoodleMatch2.0.4

moodlemoodleMatch2.1.0

moodlemoodleMatch2.1.1

VendorProductVersionCPE
moodlemoodle1.9.2cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*
moodlemoodle1.9.3cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*
moodlemoodle1.9.4cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*
moodlemoodle1.9.5cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*
moodlemoodle1.9.6cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*
moodlemoodle1.9.7cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*
moodlemoodle1.9.8cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*
moodlemoodle1.9.9cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:*
moodlemoodle1.9.10cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:*
moodlemoodle1.9.11cpe:2.3:a:moodle:moodle:1.9.11:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moodle	moodle	1.9.2	cpe:2.3:a:moodle:moodle:1.9.2:::::::*
moodle	moodle	1.9.3	cpe:2.3:a:moodle:moodle:1.9.3:::::::*
moodle	moodle	1.9.4	cpe:2.3:a:moodle:moodle:1.9.4:::::::*
moodle	moodle	1.9.5	cpe:2.3:a:moodle:moodle:1.9.5:::::::*
moodle	moodle	1.9.6	cpe:2.3:a:moodle:moodle:1.9.6:::::::*
moodle	moodle	1.9.7	cpe:2.3:a:moodle:moodle:1.9.7:::::::*
moodle	moodle	1.9.8	cpe:2.3:a:moodle:moodle:1.9.8:::::::*
moodle	moodle	1.9.9	cpe:2.3:a:moodle:moodle:1.9.9:::::::*
moodle	moodle	1.9.10	cpe:2.3:a:moodle:moodle:1.9.10:::::::*
moodle	moodle	1.9.11	cpe:2.3:a:moodle:moodle:1.9.11:::::::*