Description
Multiple SQL injection vulnerabilities in the get_record function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) category.php and (2) info.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Page Widget Cross-Site Scripting (2.7)
WordPress Plugin Download Monitor Information Disclosure (1.6.3)
WordPress Plugin Simple Photo Gallery SQL Injection (1.7.9)
Microsoft SQL Server CVE-2023-21718 Vulnerability (CVE-2023-21718)
Joomla! Core 3.x.x Multiple Cross-Site Scripting Vulnerabilities (3.0.0 - 3.9.3)