high7.5
CVE-2004-2232
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.
Impact
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | Versions 1.1.1, 1.2.0, 1.2.1, 1.3.0, 1.3.1, 1.3.2 |
References
- NVD record
- CVE.org record
- http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/mod/glossary/sql.php?r1=1.15.2.2&%3Br2=1.15.2.3
- http://secunia.com/advisories/13091
- http://securitytracker.com/id?1012113
- http://www.osvdb.org/11427
- http://www.securityfocus.com/bid/11608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17965
- http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/mod/glossary/sql.php?r1=1.15.2.2&%3Br2=1.15.2.3
- http://secunia.com/advisories/13091
- http://securitytracker.com/id?1012113
- http://www.osvdb.org/11427
- http://www.securityfocus.com/bid/11608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17965