Description

Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct "brute force attacks on user accounts" via unknown vectors.

Remediation

References

CVE-2009-0501

Related Vulnerabilities

Liferay DXP Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43803)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5629)

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-6833)

SharePoint Improper Authorization Vulnerability (CVE-2025-49701)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0212)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2009-0501