Vulnerability of the moodle/badges:configurecriteria implementation in the virtual learning environment Moodle, which allows a violator to execute arbitrary SQL code

The vulnerability of the moodle/badges:configurecriteria implementation in the virtual learning environment Moodle is related to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code by...