Information Disclosure

Moodle is vulnerable to information disclosure. Attackers are able to obtain sensitive URL information through the Referer log because it doesn't correctly restrict links with the blank attribute...