CVE-2011-4301

Опубликовано: 11 июл. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.11:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.12:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.13:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00274

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2011-4301

ubuntu

почти 13 лет назад

CVE-2011-4301

debian

почти 13 лет назад

The MoodleQuickForm class in the Forms Library in lib/formslib.php in ...

GHSA-jcrj-gmr6-p5j8

github

около 3 лет назад

Moodle Allows Modification of Constants

EPSS

Процентиль: 51%

0.00274

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo