Description

mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.

Remediation

References

CVE-2012-0792

Related Vulnerabilities

WordPress Plugin WooCommerce Weight Based Shipping Cross-Site Request Forgery (5.4.1)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-12616)

WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)

WordPress Plugin GraceMedia Media Player Local File Inclusion (1.0)

IBM RTC Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-1103)

Severity

Medium

Classification

CVE-2012-0792 CWE-200

Tags

Missing Update Known Vulnerabilities