Information Disclosure

Moodle is vulnerable to information disclosure attacks. Authenticated users can leverage a flaw in mod/lesson/pagetypes/matching.php to obtain question answers through ID values by reading the HTML source code...

CVE-2013-2243

This CVE concerns Moodle: mod/lesson/pagetypes/matching.php allows remote authenticated users to read the HTML source of a document and obtain sensitive answer information. Affected are Moodle releases up to 2.2.11; 2.3.x before 2.3.8; 2.4.x before 2.4.5; and 2.5.x before 2.5.1. The vulnerability...

CVE-2013-2243

mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document...

CVE-2013-2243: Exposure of Sensitive Information to an Unauthorized Actor

mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document...

PT-2013-3618

Name of the Vulnerable Software and Affected Versions Moodle versions 2.2.11 and earlier Moodle versions 2.3.x before 2.3.8 Moodle versions 2.4.x before 2.4.5 Moodle versions 2.5.x before 2.5.1 Description The issue allows remote authenticated users to obtain sensitive answer information by readi...