CVE ID:	CVE-2009-0502
Description:	Cross-site scripting (XSS) vulnerability in blocks/html/block_html.php in Snoopy 1.2.3, as used in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4, allows remote attackers to inject arbitrary web script or HTML via an HTML block, which is not properly handled when the "Login as" feature is used to visit a MyMoodle or Blog page.
Test IDs:	1.3.6.1.4.1.25623.1.0.63410
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0502 Debian Security Information: DSA-1724 (Google Search) http://www.debian.org/security/2009/dsa-1724 http://www.openwall.com/lists/oss-security/2009/02/04/1 http://secunia.com/advisories/33955 http://secunia.com/advisories/34418 SuSE Security Announcement: SUSE-SR:2009:007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html