CVE

Id
41740  
CVE No.
CVE-2009-4305  
Status
Candidate  
Description
SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."  
Phase
Assigned (20091211)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
458047 41740 CVE-2009-4305 CONFIRM:http://docs.moodle.org/en/Moodle_1.8.11_release_notes  View
458048 41740 CVE-2009-4305 CONFIRM:http://docs.moodle.org/en/Moodle_1.9.7_release_notes  View
458049 41740 CVE-2009-4305 CONFIRM:http://moodle.org/mod/forum/discuss.php?d=139120  View
458050 41740 CVE-2009-4305 FEDORA:FEDORA-2009-13040  View
458051 41740 CVE-2009-4305 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html  View
458052 41740 CVE-2009-4305 FEDORA:FEDORA-2009-13065  View
458053 41740 CVE-2009-4305 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html  View
458054 41740 CVE-2009-4305 FEDORA:FEDORA-2009-13080  View
458055 41740 CVE-2009-4305 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html  View
458056 41740 CVE-2009-4305 BID:37244  View
458057 41740 CVE-2009-4305 URL:http://www.securityfocus.com/bid/37244  View
458058 41740 CVE-2009-4305 SECUNIA:37614  View
458059 41740 CVE-2009-4305 URL:http://secunia.com/advisories/37614  View
458060 41740 CVE-2009-4305 VUPEN:ADV-2009-3455  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41434 JVNDB-2009-002441 Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックには、任意のコードを実行される脆弱性が存在します。 CVE-2009-4309 41740 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002441.html  View