Lucene search
Ubuntu.comUB:CVE-2006-4943HistorySep 23, 2006 - 12:00 a.m.
CVE-2006-4943
2006-09-2300:00:00
ubuntu.com
ubuntu.com
13
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
61.1%
course/jumpto.php in Moodle before 1.6.2 does not validate the session key
(sesskey) before providing content from arbitrary local URIs, which allows
remote attackers to obtain sensitive information via the jump parameter.
Related
cve
cve
CVE-2006-4943
2006-09-23 00:07:00
cvelist
cvelist
CVE-2006-4943
2006-09-23 00:00:00
nvd
nvd
CVE-2006-4943
2006-09-23 00:07:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.002
Percentile
61.1%
Related for UB:CVE-2006-4943