Description

mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.

Remediation

References

CVE-2009-4301

Related Vulnerabilities

WordPress Plugin OSM-OpenStreetMap SQL Injection (6.0.2)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0124)

WordPress 4.5.x Cross-Domain Flash Injection Vulnerability (4.5 - 4.5.12)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29051)

phpMyAdmin Other Vulnerability (CVE-2001-1060)

Severity

Medium

Classification

CVE-2009-4301 CWE-264

Tags

Missing Update Known Vulnerabilities