CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-4305

SQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.7%

CVSS Severity

CVSS v2 Score 6.5

References

Products affected by CVE-2009-4305

Moodle » Moodle » Version: 1.8.1

cpe:2.3:a:moodle:moodle:1.8.1
Moodle » Moodle » Version: 1.8.10

cpe:2.3:a:moodle:moodle:1.8.10
Moodle » Moodle » Version: 1.8.2

cpe:2.3:a:moodle:moodle:1.8.2
Moodle » Moodle » Version: 1.8.3

cpe:2.3:a:moodle:moodle:1.8.3
Moodle » Moodle » Version: 1.8.4

cpe:2.3:a:moodle:moodle:1.8.4
Moodle » Moodle » Version: 1.8.5

cpe:2.3:a:moodle:moodle:1.8.5
Moodle » Moodle » Version: 1.8.7

cpe:2.3:a:moodle:moodle:1.8.7
Moodle » Moodle » Version: 1.8.8

cpe:2.3:a:moodle:moodle:1.8.8
Moodle » Moodle » Version: 1.8.9

cpe:2.3:a:moodle:moodle:1.8.9
Moodle » Moodle » Version: 1.9.1

cpe:2.3:a:moodle:moodle:1.9.1
Moodle » Moodle » Version: 1.9.2

cpe:2.3:a:moodle:moodle:1.9.2
Moodle » Moodle » Version: 1.9.3

cpe:2.3:a:moodle:moodle:1.9.3
Moodle » Moodle » Version: 1.9.4

cpe:2.3:a:moodle:moodle:1.9.4
Moodle » Moodle » Version: 1.9.5

cpe:2.3:a:moodle:moodle:1.9.5
Moodle » Moodle » Version: 1.9.6

cpe:2.3:a:moodle:moodle:1.9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-4305

Products

Pricing

Contact Us