Description

mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, which allows remote authenticated users to overwrite arbitrary database activity presets via unspecified vectors.

Remediation

References

CVE-2012-2366

Related Vulnerabilities

WordPress Plugin Double Opt-In for Download SQL Injection (2.0.8)

WordPress Plugin Stop Spammers Security-Block Spam Users, Comments, Forms Cross-Site Scripting (2021.8)

WordPress Plugin BruteBank-WP Security & Firewall Cross-Site Request Forgery (1.8)

axios Permissive List of Allowed Inputs Vulnerability (CVE-2026-42043)

OpenSSL Resource Management Errors Vulnerability (CVE-2012-1165)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2012-2366