| Name | CVE-2012-5480 |
| Description | The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| moodle | source | squeeze | (not affected) | |||
| moodle | source | wheezy | 2.2.3.dfsg-2.6~wheezy0 | |||
| moodle | source | (unstable) | 2.2.3.dfsg-2.6 |
[squeeze] - moodle <not-affected> (Doesn't affect 1.9)