Description
Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.
Remediation
References
Related Vulnerabilities
WordPress Plugin Coming Soon Page & Maintenance Mode Cross-Site Request Forgery (1.7.8)
Play Framework Data Amplification Vulnerability (CVE-2020-28923)
WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.36)
Django Resource Management Errors Vulnerability (CVE-2014-0474)
WordPress Plugin Business Hours Indicator Cross-Site Scripting (2.3.4)