Description

Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL.

Remediation

References

CVE-2011-4309

Related Vulnerabilities

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2086)

MySQL CVE-2018-3074 Vulnerability (CVE-2018-3074)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-3630)

phpBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1627)

SugarCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-17312)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2011-4309