Linux Distros Unpatched Vulnerability : CVE-2021-36393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses. CVE-2021-36393 Note that Nessus relies on the presence of the...

SQL Injection

moodle/moodle is vulnerable to SQL Injection. The vulnerability is due to improper SQL sanitization in lib.php, allowing an authenticated attacker to inject and execute malicious SQL queries when viewing a users recent courses, leading to Information Disclosure...

Moodle SQL Injection vulnerability

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

GHSA-F46J-R7Q3-6CM2 Moodle SQL Injection vulnerability

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

UBUNTU-CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

CVE-2021-36393

CVE-2021-36393: Moodle SQL injection in recent courses library is supported by multiple connected documents detailing an authenticated, blind SQL injection via the sort parameter in Moodle’s course timeline feature. Exploits target Moodle 3.10.x (notably 3.10.1) and earlier, leveraging the core_c...

CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses...

PT-2021-3682 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to a lack of protection against SQL injection attacks. This could allow a remote attacker to execute arbitrary code by sending specially crafted SQL queries. The problem...