NVD

Id
13714  
Name
CVE-2010-2231  
Description
Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-06-28  
Modified Date
2010-09-09  
Seq
2010-2231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
76230 13714 CVE-2010-2231 http://cvs.moodle.org/moodle/mod/quiz/report/overview/report.php?r1=1.98.2.50&r2=1.98.2.51  View
76231 13714 CVE-2010-2231 http://docs.moodle.org/en/Moodle_1.8.13_release_notes  View
76232 13714 CVE-2010-2231 http://docs.moodle.org/en/Moodle_1.9.9_release_notes  View
76233 13714 CVE-2010-2231 FEDORA-2010-10286  View
76234 13714 CVE-2010-2231 FEDORA-2010-10291  View
76235 13714 CVE-2010-2231 FEDORA-2010-10321  View
76236 13714 CVE-2010-2231 SUSE-SR:2010:014  View
76237 13714 CVE-2010-2231 http://moodle.org/mod/forum/discuss.php?d=152369  View
76238 13714 CVE-2010-2231 http://tracker.moodle.org/browse/MDL-21688  View
76239 13714 CVE-2010-2231 [oss-security] 20100621 Re: CVE request: moodle 1.9.9/1.8.13 multiple vulnerabilities  View
76240 13714 CVE-2010-2231 ADV-2010-1530  View
76241 13714 CVE-2010-2231 ADV-2010-1571  View
76242 13714 CVE-2010-2231 https://bugzilla.redhat.com/show_bug.cgi?id=605809  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39077 JVNDB-2010-004862 Moodle の report/overview/report.php におけるクロスサイトリクエストフォージェリの脆弱性 Moodle の quiz モジュールの report/overview/report.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2010-2231 44811 CVE-2010-2231 13714 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004862.html 2010-06-17 2012-09-25 View