CVE

Id
44815  
CVE No.
CVE-2010-2231  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter.  
Phase
Assigned (20100609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
489581 44815 CVE-2010-2231 MLIST:[oss-security] 20100621 Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities  View
489582 44815 CVE-2010-2231 URL:http://www.openwall.com/lists/oss-security/2010/06/21/2  View
489583 44815 CVE-2010-2231 CONFIRM:http://cvs.moodle.org/moodle/mod/quiz/report/overview/report.php?r1=1.98.2.50&r2=1.98.2.51  View
489584 44815 CVE-2010-2231 CONFIRM:http://docs.moodle.org/en/Moodle_1.8.13_release_notes  View
489585 44815 CVE-2010-2231 CONFIRM:http://docs.moodle.org/en/Moodle_1.9.9_release_notes  View
489586 44815 CVE-2010-2231 CONFIRM:http://moodle.org/mod/forum/discuss.php?d=152369  View
489587 44815 CVE-2010-2231 CONFIRM:http://tracker.moodle.org/browse/MDL-21688  View
489588 44815 CVE-2010-2231 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=605809  View
489589 44815 CVE-2010-2231 FEDORA:FEDORA-2010-10286  View
489590 44815 CVE-2010-2231 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043285.html  View
489591 44815 CVE-2010-2231 FEDORA:FEDORA-2010-10291  View
489592 44815 CVE-2010-2231 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043291.html  View
489593 44815 CVE-2010-2231 FEDORA:FEDORA-2010-10321  View
489594 44815 CVE-2010-2231 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043340.html  View
489595 44815 CVE-2010-2231 SUSE:SUSE-SR:2010:014  View
489596 44815 CVE-2010-2231 URL:http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html  View
489597 44815 CVE-2010-2231 SECUNIA:40248  View
489598 44815 CVE-2010-2231 URL:http://secunia.com/advisories/40248  View
489599 44815 CVE-2010-2231 SECUNIA:40352  View
489600 44815 CVE-2010-2231 URL:http://secunia.com/advisories/40352  View
489601 44815 CVE-2010-2231 VUPEN:ADV-2010-1530  View
489602 44815 CVE-2010-2231 URL:http://www.vupen.com/english/advisories/2010/1530  View
489603 44815 CVE-2010-2231 VUPEN:ADV-2010-1571  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37156 JVNDB-2010-002941 Red Hat Network Satellite Server の Cobbler における任意のコードを実行される脆弱性 Red Hat Network Satellite Server の Cobbler のtemplate_api.py は、Cheetah テンプレートエンジンが持つ テンプレート内に含まれる Python 命令文の実行権限を無効にしないため、任意のコードを実行される脆弱性が存在します。 CVE-2010-2235 44815 8.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002941.html  View