CVE-2010-1614: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the Login-As feature or (2) when the global search feature is enabled, unspecified global search forms in the Global Search Engine. NOTE: vector 1 might be resultant from a cross-site request forgery (CSRF) vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1614?
CVE-2010-1614 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2010-1614?
To fix CVE-2010-1614, upgrade to Moodle versions 1.8.12 or 1.9.8 or later.
What are the affected versions for CVE-2010-1614?
CVE-2010-1614 affects Moodle versions 1.8.x before 1.8.12 and 1.9.x before 1.9.8.
What types of attacks are possible with CVE-2010-1614?
CVE-2010-1614 allows remote attackers to perform cross-site scripting (XSS) attacks via specific features in Moodle.
Can I exploit CVE-2010-1614 without authentication?
Yes, CVE-2010-1614 can be exploited without authentication due to its reliance on vulnerable features accessible to users.