Description
mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.
Remediation
References
Related Vulnerabilities
WordPress Plugin Product Catalog Arbitrary File Upload (3.1.1)
WordPress Plugin EZPZ One Click Backup Remote Code Execution (12.03.10)
WordPress Plugin Simple Personal Message SQL Injection (1.0.3)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-23969)
WordPress Plugin Student Result or Employee Database Security Bypass (1.6.3)