Sql injection

2023-05-0220:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

moodle

vulnerability

data sanitization

remote attacker

application database

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.2%

JSON

The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.

CPENameOperatorVersion
extra_packages_for_enterprise_linuxeq7.0
fedoraeq36
fedoraeq37
fedoraeq38
moodlege4.1.0
moodlelt4.1.3
moodlege4.0.0
moodlelt4.0.8
moodlege3.11.0
moodlelt3.11.14

Name	Operator	Version
extra_packages_for_enterprise_linux	eq	7.0
fedora	eq	36
fedora	eq	37
fedora	eq	38
moodle	ge	4.1.0
moodle	lt	4.1.3
moodle	ge	4.0.0
moodle	lt	4.0.8
moodle	ge	3.11.0
moodle	lt	3.11.14