Sql injection

The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via deleterecords...

CVE-2019-15536

The Acclaim block plugin before 2019-06-26 for Moodle allows SQL Injection via deleterecords...

CVE-2019-15536

CVE-2019-15536 affects the Moodle Acclaim block plugin prior to 2019-06-26, enabling SQL injection via delete_records. Documents indicate a network-exposed, high-severity flaw (CVSS3: CRITICAL, 9.8) with no authentication and no required user interaction, allowing execution of arbitrary SQL comma...