PT-2006-5681 · Moodle · Moodle

Published 2006-09-23 · Updated 2020-12-01 · CVE-2006-4938

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 1.6.2

Description The issue concerns the help.php file in Moodle, which fails to check the existence of certain help files before including them. This might allow remote authenticated users to obtain the path in an error message.

Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-4938

Affected Products

Moodle

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2006-4938 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4938 · Note
• http://docs.moodle.org/en/Release_notes#Moodle_1.6.2 · Note