Description

Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors.

Remediation

References

CVE-2008-6125

Related Vulnerabilities

Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-4564)

Oracle Application Server Other Vulnerability (CVE-2006-5366)

WordPress Plugin WP BASE Booking of Appointments, Services and Events PHP Object Injection (3.5.0)

Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1806)

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1950)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2008-6125