CVE

Id
41732  
CVE No.
CVE-2009-4297  
Status
Candidate  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.  
Phase
Assigned (20091211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
457933 41732 CVE-2009-4297 CONFIRM:http://docs.moodle.org/en/Moodle_1.8.11_release_notes  View
457934 41732 CVE-2009-4297 CONFIRM:http://docs.moodle.org/en/Moodle_1.9.7_release_notes  View
457935 41732 CVE-2009-4297 CONFIRM:http://moodle.org/mod/forum/discuss.php?d=139100  View
457936 41732 CVE-2009-4297 FEDORA:FEDORA-2009-13040  View
457937 41732 CVE-2009-4297 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html  View
457938 41732 CVE-2009-4297 FEDORA:FEDORA-2009-13065  View
457939 41732 CVE-2009-4297 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html  View
457940 41732 CVE-2009-4297 FEDORA:FEDORA-2009-13080  View
457941 41732 CVE-2009-4297 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html  View
457942 41732 CVE-2009-4297 BID:37244  View
457943 41732 CVE-2009-4297 URL:http://www.securityfocus.com/bid/37244  View
457944 41732 CVE-2009-4297 SECUNIA:37614  View
457945 41732 CVE-2009-4297 URL:http://secunia.com/advisories/37614  View
457946 41732 CVE-2009-4297 VUPEN:ADV-2009-3455  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44192 JVNDB-2009-005199 Moodle の mnet/lib.php における任意の MNET 関数を実行される脆弱性 Moodle の mnet/lib.php は、MNET サービスが有効になっている際、パーミッションを適切にチェックしないため、任意の MNET 関数を実行される脆弱性が存在します。 CVE-2009-4301 41732 6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005199.html  View