Description
The moodle_enrol_external:role_assign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which allows remote authenticated users to gain privileges by making a role assignment.
Remediation
References
Related Vulnerabilities
WordPress Plugin Visitor Traffic Real Time Statistics Unspecified Vulnerability (2.13)
WordPress Plugin Akeeba Backup CORE for WordPress Arbitrary File Upload (1.1.3)
PHP Uncontrolled Resource Consumption Vulnerability (CVE-2015-9253)
WordPress Plugin eShop Multiple Vulnerabilities (6.3.14)
WordPress Plugin RapidLoad Power-Up for Autoptimize SQL Injection (1.6.35)