PT-2009-3152
CVE-2009-0499
·
تاريخ النشر
2009-02-10
·
تاريخ التحديث
2020-12-01
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Moodle versions 1.7 through 1.7.6
Moodle versions 1.8 through 1.8.7
Moodle versions 1.9 through 1.9.3
Description
A cross-site request forgery (CSRF) issue exists in the forum code, allowing remote attackers to delete unauthorized forum posts via a link or IMG tag to "post.php".
Recommendations
For Moodle versions 1.7 through 1.7.6, update to version 1.7.7 or later.
For Moodle versions 1.8 through 1.8.7, update to version 1.8.8 or later.
For Moodle versions 1.9 through 1.9.3, update to version 1.9.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾