Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-4305
HistoryDec 16, 2009 - 12:00 a.m.

CVE-2009-4305

2009-12-1600:00:00
ubuntu.com
ubuntu.com
7

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.002

Percentile

61.5%

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11
and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary
SQL commands via vectors related to an “escaping issue when processing AICC
CRS file (Course_Title).”

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.002

Percentile

61.5%