Description In Moodle 2.x and 3.x, SQL injection can occur via user preferences. Remediation References CVE-2017-2641 Related Vulnerabilities Joomla! Core 2.5.x Information Disclosure (2.5.0 - 2.5.3) MySQL CVE-2017-10283 Vulnerability (CVE-2017-10283) ClipBucket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-6642) Moodle Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-48896) MySQL CVE-2016-0640 Vulnerability (CVE-2016-0640) Severity Critical Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-138 CVE-2017-2641