Description

mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors.

Remediation

References

CVE-2014-2572

Related Vulnerabilities

PHP Out-of-bounds Read Vulnerability (CVE-2018-14851)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9479)

WordPress Plugin Generate Child Theme Security Bypass (1.5.3)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.10)

WordPress Plugin Esponce QR Code Generator Cross-Site Scripting (1.4)

Severity

Medium

Classification

CVE-2014-2572 CWE-264

Tags

Missing Update Known Vulnerabilities