3 matches found
CVE-2006-4937
lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display EWARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages...
CVE-2006-4937
lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display EWARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages...
CVE-2006-4937
CVE-2006-4937 impacts Moodle prior to 1.6.2. The vulnerable code is in lib/setup.php, which sets the error reporting level to 7 to display E_WARNING messages even when debugging is disabled. This could allow remote authenticated users to obtain sensitive information by triggering warning messages...