CVE-2016-3733 | BDVDB-2026-84387 Detail

Description#

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2016/05/17/4
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51369
https://bugzilla.redhat.com/show_bug.cgi?id=1335933
http://www.securitytracker.com/id/1035902

Exploit#

No public exploit known

History#

Version 12017-04-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.