Nessus Plugin #15639

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

Moodle SQL injection flaws

Family:

CGI abuses

Category:

infos

Copyright:

This script is Copyright (C) 2004 David Maciejak

Summary:

Determines if Moodle is older than 1.4.2

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

11608, 11691, 12120

Xrefs:

-

Description:

The remote host is running a version of the Moodle suite, an open-source
course management system written in PHP, which is older than version 1.4.3.

The remote version of this software is vulnerable to SQL injection issue
in 'glossary' module due to a lack of user input sanitization.

Solution : Upgrade to Moodle 1.4.3
Risk factor : High