Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-1615
HistoryApr 29, 2010 - 12:00 a.m.

CVE-2010-1615

2010-04-2900:00:00
ubuntu.com
ubuntu.com
5

0.002 Low

EPSS

Percentile

58.9%

Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and
1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands
via vectors related to (1) the add_to_log function in mod/wiki/view.php in
the wiki module, or (2) “data validation in some forms elements” related to
lib/form/selectgroups.php.

Notes

Author Note
kees MSA-10-0006 http://tracker.moodle.org/browse/MDL-21818

0.002 Low

EPSS

Percentile

58.9%