CVE-2011-4301
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields.
La clase MoodleQuickForm en la biblioteca de formularios en lib/formslib.php en Moodle v1.9.x antes de v1.9.14, v2.0.x antes de v2.0.5 y v2.1.x antes de v2.1.2 no reconoce las operaciones setConstant de Forms API, lo que permite a atacantes remotos presentar el contenido de forma inesperada mediante la modificación de los valores de los campos constantes.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-11-04 CVE Reserved
- 2012-07-11 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f1f70bd4dde6cd1ea4bdb8ab28fa3d36a53b89d8 | X_refsource_confirm | |
| https://bugzilla.redhat.com/show_bug.cgi?id=747444 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://moodle.org/mod/forum/discuss.php?d=188313 | 2023-02-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.2 Search vendor "Moodle" for product "Moodle" and version "1.9.2" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.3 Search vendor "Moodle" for product "Moodle" and version "1.9.3" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.4 Search vendor "Moodle" for product "Moodle" and version "1.9.4" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.5 Search vendor "Moodle" for product "Moodle" and version "1.9.5" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.6 Search vendor "Moodle" for product "Moodle" and version "1.9.6" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.7 Search vendor "Moodle" for product "Moodle" and version "1.9.7" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.8 Search vendor "Moodle" for product "Moodle" and version "1.9.8" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.9 Search vendor "Moodle" for product "Moodle" and version "1.9.9" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.10 Search vendor "Moodle" for product "Moodle" and version "1.9.10" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.11 Search vendor "Moodle" for product "Moodle" and version "1.9.11" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.12 Search vendor "Moodle" for product "Moodle" and version "1.9.12" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 1.9.13 Search vendor "Moodle" for product "Moodle" and version "1.9.13" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 2.0.0 Search vendor "Moodle" for product "Moodle" and version "2.0.0" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 2.0.1 Search vendor "Moodle" for product "Moodle" and version "2.0.1" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 2.0.2 Search vendor "Moodle" for product "Moodle" and version "2.0.2" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 2.0.3 Search vendor "Moodle" for product "Moodle" and version "2.0.3" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 2.0.4 Search vendor "Moodle" for product "Moodle" and version "2.0.4" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 2.1.0 Search vendor "Moodle" for product "Moodle" and version "2.1.0" | - |
Affected
| ||||||
| Moodle Search vendor "Moodle" | Moodle Search vendor "Moodle" for product "Moodle" | 2.1.1 Search vendor "Moodle" for product "Moodle" and version "2.1.1" | - |
Affected
| ||||||