Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2363
HistoryJul 21, 2012 - 12:00 a.m.

CVE-2012-2363

2012-07-2100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.001

Percentile

42.2%

SQL injection vulnerability in calendar/event.php in the calendar
implementation in Moodle 1.9.x before 1.9.18 allows remote authenticated
users to execute arbitrary SQL commands via a crafted calendar event.

Notes

Author Note
jdstrand moodle 1.9 and higher

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.001

Percentile

42.2%