Description
Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Database Backup Unspecified Vulnerability (4.1)
MySQL CVE-2018-3247 Vulnerability (CVE-2018-3247)
WordPress Plugin Event post Local File Inclusion (5.9.5)
SharePoint CVE-2023-24950 Vulnerability (CVE-2023-24950)
WordPress Plugin If>So Dynamic Content Unspecified Vulnerability (1.4.1)