NetSight
critical10.0

CVE-2006-4936

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vect…

Impact

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

Affected products

VendorProductAffected versions
MoodleMoodle
through 1.6.1
Version 1.6.0

Weakness classification

References