Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Remediation

References

CVE-2009-4297

Related Vulnerabilities

WordPress Plugin Target First Live chat Unspecified Vulnerability (1.0)

WordPress Plugin Easy Contact Forms Export 'file' Parameter Information Disclosure (1.1.0)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2606)

Oracle JRE CVE-2012-5072 Vulnerability (CVE-2012-5072)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (3.6.1)

Severity

Medium

Classification

CVE-2009-4297 CWE-352

Tags

Missing Update Known Vulnerabilities