2 matches found
CVE-2006-4943
course/jumpto.php in Moodle before 1.6.2 does not validate the session key sesskey before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter...
5CVSS6.6AI score0.01231EPSS
SaveExploits0References1
CVE-2006-4943
course/jumpto.php in Moodle before 1.6.2 does not validate the session key sesskey before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter...
5CVSS6AI score0.01231EPSS
SaveExploits0References1
20