NuytsTech Security

CVE-2009-4301

by ·

mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.

Date published : 2009-12-15

http://www.securityfocus.com/bid/37244

http://cvs.moodle.org/moodle/mnet/lib.php?r1=1.16.2.10&r2=1.16.2.11

Tags: