Description

Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability.

Remediation

References

CVE-2010-1616

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0215)

WordPress Plugin Social Share Icons & Social Share Buttons Unspecified Vulnerability (1.4)

MySQL CVE-2014-0431 Vulnerability (CVE-2014-0431)

WordPress Plugin Podcast Subscribe Buttons Cross-Site Scripting (1.4.1)

WebLogic Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-23305)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2010-1616