Description In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames. Remediation References CVE-2018-1043 Related Vulnerabilities WordPress Plugin Slimstat Analytics Cross-Site Scripting (3.5.5) TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4855) MySQL CVE-2016-0505 Vulnerability (CVE-2016-0505) Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5741) WordPress Plugin Slider Revolution Responsive Arbitrary File Upload (3.0.95) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CVE-2018-1043