Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3757)

Description

Moodle 2.0.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by webservice/xmlrpc/locallib.php and certain other files.

Remediation

References

CVE-2011-3757

Related Vulnerabilities

WordPress Plugin Crelly Slider Arbitrary File Upload (1.3.4)

MySQL CVE-2016-0644 Vulnerability (CVE-2016-0644)

WordPress Plugin Integration for Contact Form 7 and ActiveCampaign Cross-Site Scripting (1.0.3)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-34171)

WordPress Plugin YOP Poll Cross-Site Scripting (6.1.1)

Severity

Medium

Classification

CVE-2011-3757 CWE-200