Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-6124
HistoryFeb 12, 2009 - 12:00 a.m.

CVE-2008-6124

2009-02-1200:00:00
ubuntu.com
ubuntu.com
10

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

49.2%

SQL injection vulnerability in the hotpot_delete_selected_attempts function
in report.php in the HotPot module in Moodle 1.6 before 1.6.7, 1.7 before
1.7.5, 1.8 before 1.8.6, and 1.9 before 1.9.2 allows remote attackers to
execute arbitrary SQL commands via a crafted selected attempt.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmoodle< 1.8.2-1ubuntu4.2UNKNOWN
ubuntu8.10noarchmoodle< 1.8.2-1.2ubuntu2.1UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.001

Percentile

49.2%