CVE-2006-4938

2006-09-2300:00:00

mitre

www.cve.org

moodle

help.php

path disclosure

error message

1.6.2

AI Score

6.2

Confidence

Low

EPSS

0.001

Percentile

46.7%

JSON

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.

References

docs.moodle.org/en/Release_notes#Moodle_1.6.2