CVE-2005-3648

2005-11-1711:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.011

Percentile

84.6%

JSON

Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.

References

marc.info/?l=bugtraq&m=113165668814241&w=2

osvdb.org/20748

rgod.altervista.org/moodle16dev.html

secunia.com/advisories/17526/

securitytracker.com/id?1015181

www.securityfocus.com/bid/15380/

www.vupen.com/english/advisories/2005/2387

exchange.xforce.ibmcloud.com/vulnerabilities/23058