Description

Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role.

Remediation

References

CVE-2011-4288

Related Vulnerabilities

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Cross-Site Request Forgery (7.1.6)

WordPress Plugin Advance Search for WooCommerce Cross-Site Scripting (1.0.9)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-37383)

Oracle JRE CVE-2013-3744 Vulnerability (CVE-2013-3744)

WordPress Plugin Donate by BestWebSoft Cross-Site Scripting (2.1.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2011-4288