CVE-2009-4301

Description

References

• cvs.moodle.org/moodle/mnet/lib.php · Patch
• cvs.moodle.org/moodle/mnet/lib.php · Patch
• docs.moodle.org/en/Moodle_1.8.11_release_notes · Patch
• docs.moodle.org/en/Moodle_1.9.7_release_notes · Patch
• moodle.org/mod/forum/discuss.php · Patch
• secunia.com/advisories/37614 · Vendor Advisory
• securityfocus.com/bid/37244 · Patch
• vupen.com/english/advisories/2009/3455 · Vendor Advisory
• redhat.com/archives/fedora-package-announce/2009-December/msg00704.html
• redhat.com/archives/fedora-package-announce/2009-December/msg00730.html
• redhat.com/archives/fedora-package-announce/2009-December/msg00751.html

moodle의 다른 취약점

• CVE-2026-102588보통 6.5A flaw was found in Moodle. The XML grade import feature lacks proper Cross-Site Request Forgery (CSRF) token validation. By tricking an aut…
• CVE-2026-102587낮음 2.7A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user wit…
• CVE-2026-102586보통 6.1A flaw was found in Moodle. Insufficient sanitization of username input on the password reset page allows a remote attacker to conduct a cro…
• CVE-2026-102585보통 4.3A flaw was found in Moodle. When enrolling a user into a course while assigning them to a group, the application does not verify whether the…
• CVE-2026-102584보통 4.3A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade pe…