Lucene search
GoogleOSV:GHSA-RVMC-8GMG-GGQRHistoryMar 12, 2022 - 12:00 a.m.
Moodle Blind SQL injection possible via MNet authentication
2022-03-1200:00:32
Google
osv.dev
11
moodle
sql injection
mnet authentication
xml-rpc
administrator access
keypair
software vulnerability
An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.
Related
osv
osv
CVE-2021-32474
2022-03-11 18:15:15
BIT-moodle-2021-32474
2024-03-06 11:10:14
nvd
nvd
CVE-2021-32474
2022-03-11 18:15:15
prion
prion
Sql injection
2022-03-11 18:15:00
cvelist
cvelist
CVE-2021-32474
2022-03-11 17:54:25
cve
cve
CVE-2021-32474
2022-03-11 18:15:15
ubuntucve
ubuntucve
CVE-2021-32474
2022-03-11 00:00:00
github
github
Moodle Blind SQL injection possible via MNet authentication
2022-03-12 00:00:32
veracode
veracode
SQL Injection
2022-03-15 12:41:15
openvas
openvas
redos
redos
nessus
nessus
Moodle 3.5.x < 3.5.18 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.10.x < 3.10.4 Multiple Vulnerabilities
2023-02-20 00:00:00
Moodle 3.9.x < 3.9.7 Multiple Vulnerabilities
2023-02-20 00:00:00