Description

The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address restrictions via an XMLRPC request.

Remediation

References

CVE-2011-4588

Related Vulnerabilities

Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-13675)

WordPress 4.1.x Cross-Site Scripting Vulnerability (4.1 - 4.1.8)

WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.7)

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files Multiple Cross-Site Scripting Vulnerabilities (1.3.8)

WordPress Plugin School Management System-WPSchoolPress Multiple Vulnerabilities (2.1.9)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2011-4588