NVD

Id
47050  
Name
CVE-2012-6102  
Description
lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2013-01-27  
Modified Date
2013-01-28  
Seq
2012-6102  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235642 47050 CVE-2012-6102 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37244  View
235643 47050 CVE-2012-6102 [oss-security] 20130121 Moodle security notifications public  View
235644 47050 CVE-2012-6102 https://moodle.org/mod/forum/discuss.php?d=220163  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19720 JVNDB-2013-001295 Moodle における任意のユーザのサブミッションコメントを読まれるまたは改ざんされる脆弱性 Moodle の Assignment モジュール内の Submission コメントプラグインの lib.php には、任意のユーザのサブミッションコメントを読まれる、または改ざんされる脆弱性が存在します。 CVE-2012-6102 59340 CVE-2012-6102 47050 6.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001295.html 2013-01-21 2013-01-29 View