Description

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."

Remediation

References

CVE-2009-4305

Related Vulnerabilities

Oracle Database Server CVE-2011-2230 Vulnerability (CVE-2011-2230)

PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-7375)

Apache HTTP Server Other Vulnerability (CVE-2003-0132)

WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-17866)

Liferay Portal Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-43808)

Severity

Medium

Classification

CVE-2009-4305 CWE-138

Tags

Missing Update Known Vulnerabilities