CVE-2009-3778: SQL Injection
Published Oct 26, 2009
·Updated
SQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
3 affected components
Adam Gerson Moodle Courselist=6.x-1.2-beta1
Adam Gerson Moodle Courselist=6.x-1.2-beta2
Drupal Drupal
Remediation
Patch Available
Patch Available
Patch Available
Event History
Oct 26, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-3778?
CVE-2009-3778 has a medium severity rating due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2009-3778?
To fix CVE-2009-3778, upgrade your Moodle Course List module to version 6.x-1.2 or later.
3
Which versions of Moodle are affected by CVE-2009-3778?
CVE-2009-3778 affects Moodle Course List versions 6.x-1.2 beta1 and beta2.
4
What type of vulnerability is CVE-2009-3778?
CVE-2009-3778 is an SQL injection vulnerability that allows execution of arbitrary SQL commands.
5
Who can exploit CVE-2009-3778?
CVE-2009-3778 can be exploited by remote attackers with knowledge of the unspecified vectors.