CVE-2011-4292: SQL Injection
Published Jul 16, 2012
·Updated
Moodle 2.0.x before 2.0.3 allows remote authenticated users to cause a denial of service (invalid database records) via a series of crafted comments operations.
Affected Software
4 affected componentsFixes available
Moodle moodle=2.0.2
Moodle moodle=2.0.1
Moodle moodle=2.0.0
composer/moodle/moodle>=2.0.0<2.0.3
2.0.3
Remediation
Event History
Jul 16, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:28 AM
DescriptionSeverityWeaknessAffected Software
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4292?
CVE-2011-4292 is classified as a denial of service vulnerability.
2
How do I fix CVE-2011-4292?
Resolve CVE-2011-4292 by upgrading Moodle to version 2.0.3 or later.
3
Who is affected by CVE-2011-4292?
CVE-2011-4292 affects Moodle versions 2.0.0 to 2.0.2.
4
What type of attack does CVE-2011-4292 involve?
CVE-2011-4292 involves remote authenticated users causing denial of service through crafted comments.
5
Is there a patch available for CVE-2011-4292?
Yes, updating to Moodle version 2.0.3 or higher addresses the vulnerability in CVE-2011-4292.