CVE-2009-4298

Description

The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors.

References

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html

http://www.vupen.com/english/advisories/2009/3455

http://www.securityfocus.com/bid/37244

http://secunia.com/advisories/37614

http://moodle.org/mod/forum/discuss.php?d=139102

http://docs.moodle.org/en/Moodle_1.9.7_release_notes

http://docs.moodle.org/en/Moodle_1.8.11_release_notes

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3