Lucene search

Ubuntu.comUB:CVE-2008-6124

HistoryFeb 12, 2009 - 12:00 a.m.

CVE-2008-6124

2009-02-1200:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

50.4%

JSON

SQL injection vulnerability in the hotpot_delete_selected_attempts function
in report.php in the HotPot module in Moodle 1.6 before 1.6.7, 1.7 before
1.7.5, 1.8 before 1.8.6, and 1.9 before 1.9.2 allows remote attackers to
execute arbitrary SQL commands via a crafted selected attempt.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmoodle< 1.8.2-1ubuntu4.2UNKNOWN
ubuntu8.10noarchmoodle< 1.8.2-1.2ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	moodle	< 1.8.2-1ubuntu4.2	UNKNOWN
ubuntu	8.10	noarch	moodle	< 1.8.2-1.2ubuntu2.1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2008-6124

nvd.nist.gov/vuln/detail/CVE-2008-6124

security-tracker.debian.org/tracker/CVE-2008-6124

ubuntu.com/security/notices/USN-791-1

www.cve.org/CVERecord?id=CVE-2008-6124

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

50.4%

JSON

Related for UB:CVE-2008-6124