CVE-2012-5480 | BDVDB-2026-53561 Detail

Description#

The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/56505
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558
https://moodle.org/mod/forum/discuss.php?d=216160
http://openwall.com/lists/oss-security/2012/11/19/1

Exploit#

No public exploit known

History#

Version 12012-11-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.