Description

Algorithmic complexity vulnerability in Moodle 1.9.x before 1.9.19, 2.0.x before 2.0.10, 2.1.x before 2.1.7, and 2.2.x before 2.2.4 allows remote authenticated users to cause a denial of service (CPU consumption) by using the advanced-search feature on a database activity that has many records.

Remediation

References

CVE-2012-3398

Related Vulnerabilities

WordPress Plugin WP Unique Article Header Image Cross-Site Request Forgery (1.0)

WordPress 2.0.5 Charset Decoding SQL Injection Vulnerability (0.6.2 - 2.0.5)

PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-6476)

WordPress Plugin NextGEN Gallery-WordPress Gallery Privilege Escalation (3.2.2)

IBM WebSEAL Improper Input Validation Vulnerability (CVE-2019-4036)

Severity

Medium

Classification

CVE-2012-3398

Tags

Missing Update Known Vulnerabilities