CVE-2009-4305

NameCVE-2009-4305
DescriptionSQL injection vulnerability in the SCORM module in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allows remote authenticated users to execute arbitrary SQL commands via vectors related to an "escaping issue when processing AICC CRS file (Course_Title)."
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-1986-1
Debian Bugs559531

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
moodlesourcelenny1.8.2.dfsg-3+lenny3DSA-1986-1
moodlesource(unstable)1.8.2.dfsg-6medium559531

Notes

MSA-09-0031

Search for package or bug name: Reporting problems