Description

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export

Remediation

References

CVE-2012-1158

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2014-3487)

WordPress Plugin Events Manager Multiple Cross-Site Scripting Vulnerabilities (5.3.3)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0816)

WordPress Plugin easyping-website subscriptions done right PHP Object Injection (0.0.1)

WordPress Plugin Easy Forms for Mailchimp PHP Code Injection (6.5.2)

Severity

Medium

Classification

CVE-2012-1158 CWE-200 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities