NuytsTech Security

CVE-2012-5480

by ·

The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants’ entries via an advanced search.

Date published : 2012-11-21

http://www.securityfocus.com/bid/56505

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558

Tags: