CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
69.2%
Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page.
Vendor | Product | Version | CPE |
---|---|---|---|
moodle | moodle | * | cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:* |
debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* |
lists.opensuse.org/opensuse-security-announce/2008-08/msg00001.html
moodle.org/mod/forum/discuss.php?d=101405
secunia.com/advisories/31196
secunia.com/advisories/31339
www.debian.org/security/2008/dsa-1691
www.procheckup.com/Vulnerability_PR08-16.php
www.securityfocus.com/archive/1/494658/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/43964