Lucene search

K
cvelistMitreCVELIST:CVE-2009-4305
HistoryDec 16, 2009 - 1:00 a.m.

CVE-2009-4305

2009-12-1601:00:00
mitre
www.cve.org
4
cve-2009-4305
sql injection
moodle 1.8
moodle 1.9
remote authenticated users
arbitrary sql commands
aicc crs file
course_title

AI Score

7.6

Confidence

Low

EPSS

0.002

Percentile

61.5%

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an “escaping issue when processing AICC CRS file (Course_Title).”

AI Score

7.6

Confidence

Low

EPSS

0.002

Percentile

61.5%