CVE-2011-4203 | BDVDB-2026-48568 Detail

Description#

CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12011-12-22Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.