CVE-2011-4297

CVE-2011-4297 affects Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1. The flaw in the file comment/lib.php fails to properly restrict comment capabilities, allowing remote attackers to post a comment by leveraging the guest role on a front-page activity. The available connected documents confir...