REDHAT-BUG-2543632: SQL Injection
A flaw was found in Moodle. A SQL injection risk was identified in a question bank web service, allowing unsanitized input to reach a database query. The advisory does not state the exact capability required to call the affected web service function; this draft assumes it requires an elevated (teacher-level) role rather than being reachable by a basic authenticated user.
Affected Software
Event History
Frequently Asked Questions
Can a basic authenticated Moodle user exploit this issue?
The advisory does not state the capability required to call the affected web service function. The available draft assumes an elevated teacher-level role is required, but this is not confirmed.
How can I determine whether my Moodle deployment is affected?
The provided advisory information does not identify affected or fixed Moodle versions, nor does it provide detection guidance. Review the referenced vendor advisory for version and remediation details.