EUVD-2012-0828

Malware in sbrugna...

Session Key Disclosure

Moodle is vulnerable to session key disclosure.If anonymous front-page forum is enabled, remote attackers can obtain session keys for their own sessions by visiting the front page...

Code injection

Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page...

CVE-2012-0799

Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4 are affected. When an anonymous front-page forum is enabled, remote attackers can obtain session keys for their sessions by visiting the front page. This describes a session-key disclosure vulnerability in Moodle, with impact limited to session con...