Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.

Remediation

References

CVE-2011-4281

Related Vulnerabilities

WordPress Plugin JC Coupon Cross-Site Scripting (2.5)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29512)

Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2015-3416)

WordPress Plugin NextGEN Gallery-WordPress Gallery Security Bypass (3.1.6)

WordPress Plugin Wp Cookie Choice Cross-Site Request Forgery (1.1.0)

Severity

Medium

Classification

CVE-2011-4281 CWE-352

Tags

Missing Update Known Vulnerabilities