Moodle 1.5.2 - 'moodledata' Remote Session Disclosure

--/ INTRODUCTION -- / Advisory : MOODLE 2KB SESSION|O:6:"object":12:s:12:"sessiontest";s:10:"zN0PiMhwWK";s:8:"encoding"; s:10:"iso-8859-1";s:7:"fromurl";s:69:"http://www.TARGET.com/moodle/mod/forum/ view.php?id=100";s:10:"logincount";i:1;s:18:"calcoursereferer";i:0;s:15:"cal...

CVE-2005-3648

Multiple SQL injection vulnerabilities in the getrecord function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 category.php and 2 info.php...

CVE-2005-3649

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter...