Description
The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2020-1500 Vulnerability (CVE-2020-1500)
WordPress Plugin Easy Table Cross-Site Scripting (1.6)
MySQL CVE-2021-35629 Vulnerability (CVE-2021-35629)
MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2022-47927)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0119)