Description

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified (1) userid or (2) courseid field.

Remediation

References

CVE-2013-1834

Related Vulnerabilities

WordPress Plugin WooCommerce PDF Vouchers-Ultimate Gift Cards Unspecified Vulnerability (4.9.4)

WordPress 2.3.3 Directory Traversal Vulnerability (0.6.2 - 2.3.3)

WordPress Plugin Memphis Documents Library Arbitrary File Download (3.1.5)

WordPress Plugin Faster and Easier scroll to Top for WordPress-Smart Scroll to Top Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.3)

WordPress Plugin WP-Predict 'predictId' Parameter Blind SQL Injection (1.0)

Severity

Medium

Classification

CVE-2013-1834 CWE-264

Tags

Missing Update Known Vulnerabilities