Description
Cross-site request forgery (CSRF) vulnerability in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to modify profile settings and gain privileges as other users via a link or IMG tag to the user edit profile page.
Remediation
References
Related Vulnerabilities
WordPress Plugin MM Forms Community 'edit_details.php' SQL Injection (1.2.3)
WordPress Plugin Mapplic-Custom Interactive Map Server-Side Request Forgery (6.1)
WordPress Plugin Yet Another bol.com Cross-Site Scripting (1.4)
WordPress Plugin Click to top Cross-Site Scripting (1.2.7)
WordPress Plugin SpamBam Key Calculation Security Bypass (2.1)