NVD

Id
10770  
Name
CVE-2011-4301  
Description
The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-07-11  
Modified Date
2012-07-11  
Seq
2011-4301  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60516 10770 CVE-2011-4301 http://git.moodle.org/gw?p=moodle.git;a=commit;h=f1f70bd4dde6cd1ea4bdb8ab28fa3d36a53b89d8  View
60517 10770 CVE-2011-4301 http://moodle.org/mod/forum/discuss.php?d=188313  View
60518 10770 CVE-2011-4301 https://bugzilla.redhat.com/show_bug.cgi?id=747444  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34817 JVNDB-2011-005059 Moodle の lib/formslib.php における予期せぬフォームコンテンツを送信される脆弱性 Moodle の lib/formslib.php の Forms Library 内の MoodleQuickForm クラスは、Forms API setConstant の動作を認識しないため、予期せぬフォームコンテンツを送信される脆弱性が存在します。 CVE-2011-4301 52208 CVE-2011-4301 10770 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005059.html 2011-10-18 2012-07-12 View