Test ID:	1.3.6.1.4.1.25623.1.0.100384
Category:	Web application abuses
Title:	Moodle Multiple Vulnerabilities
Summary:	Moodle is prone to multiple vulnerabilities including cross-site;request-forgery, security bypass, information-disclosure and SQL-;injection issues.
Description:	Summary: Moodle is prone to multiple vulnerabilities including cross-site request-forgery, security bypass, information-disclosure and SQL- injection issues. Vulnerability Impact: Attackers can exploit these issues to bypass certain security restrictions, gain access to sensitive information, perform unauthorized actions, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: These issues affect Moodle versions prior to 1.8.11 and 1.9.7. Solution: Updates are available. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4297 BugTraq ID: 37244 http://www.securityfocus.com/bid/37244 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html http://secunia.com/advisories/37614 http://www.vupen.com/english/advisories/2009/3455
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.