Description

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information.

Remediation

References

CVE-2009-4303

Related Vulnerabilities

WordPress Plugin Qtranslate Slug Cross-Site Request Forgery (1.1.18)

Squid NULL Pointer Dereference Vulnerability (CVE-2023-46728)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2017-5660)

MediaWiki CVE-2021-42049 Vulnerability (CVE-2021-42049)

WordPress Plugin Postie 'From' Field Cross-Site Scripting (1.4.3)

Severity

Medium

Classification

CVE-2009-4303 CWE-200

Tags

Missing Update Known Vulnerabilities