| Package | Affected versions | Patched versions |
|---|---|---|
| moodle | ≥ 5.0.0, < 5.0.9≥ 5.1.0, < 5.1.6≥ 5.2.0, < 5.2.2< 4.5.13 | 5.0.95.1.65.2.24.5.13 |
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could allow an attacker to view, alter, or delete sensitive data stored in the underlying database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free