CVE-2006-4939

2006-09-2300:00:00

mitre

www.cve.org

cve-2006-4939

moodle

backup_scheduled.php

security vulnerability

trace data

debugging disabled

attackers

pathname

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

53.8%

JSON

backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.

References

docs.moodle.org/en/Release_notes#Moodle_1.6.2