CVE-2010-1615: SQL Injection

Q: What is the severity of CVE-2010-1615?

The severity of CVE-2010-1615 is classified as high due to the potential for remote SQL injection attacks.

Q: How do I fix CVE-2010-1615?

To fix CVE-2010-1615, update Moodle to version 1.8.12 or 1.9.8 or later.

Q: What versions of Moodle are affected by CVE-2010-1615?

CVE-2010-1615 affects Moodle versions 1.8.x before 1.8.12 and 1.9.x before 1.9.8.

Q: What are the consequences of exploiting CVE-2010-1615?

Exploiting CVE-2010-1615 may allow attackers to execute arbitrary SQL commands, compromising the database integrity.

Q: Are there known exploits for CVE-2010-1615?

Yes, there are known exploits for CVE-2010-1615 that take advantage of the SQL injection vulnerabilities in affected Moodle versions.

Published Apr 29, 2010

Updated

Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the addtolog function in mod/wiki/view.php in the wiki module, or (2) "data validation in some forms elements" related to lib/form/selectgroups.php.

Affected Software

20 affected componentsFixes available

Moodle moodle=1.8.1

Moodle moodle=1.8.2

Moodle moodle=1.8.3

Moodle moodle=1.8.4

Moodle moodle=1.8.5

Moodle moodle=1.8.6

Moodle moodle=1.8.7

Moodle moodle=1.8.8

Moodle moodle=1.8.9

Moodle moodle=1.8.10

Moodle moodle=1.8.11

Moodle moodle=1.9.1

Moodle moodle=1.9.2

Moodle moodle=1.9.3

Moodle moodle=1.9.4

Moodle moodle=1.9.5

Moodle moodle=1.9.6

Moodle moodle=1.9.7

composer/moodle/moodle>=1.9.0<1.9.8

1.9.8

composer/moodle/moodle>=1.8.0<1.8.12

1.8.12

Event History

Apr 29, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

via NVD·09:30 PM

DescriptionSeverityWeaknessAffected Software

May 13, 2022

Advisory Published

via GitHub·01:13 AM

Frequently Asked Questions

What is the severity of CVE-2010-1615?

The severity of CVE-2010-1615 is classified as high due to the potential for remote SQL injection attacks.

How do I fix CVE-2010-1615?

To fix CVE-2010-1615, update Moodle to version 1.8.12 or 1.9.8 or later.

What versions of Moodle are affected by CVE-2010-1615?

CVE-2010-1615 affects Moodle versions 1.8.x before 1.8.12 and 1.9.x before 1.9.8.

What are the consequences of exploiting CVE-2010-1615?

Exploiting CVE-2010-1615 may allow attackers to execute arbitrary SQL commands, compromising the database integrity.

Are there known exploits for CVE-2010-1615?