user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page.

Several remote vulnerabilities have been discovered in Moodle, a course management system. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2010-1613     Moodle does not enable the 'Regenerate session id during     login' setting by default, which makes it easier for     remote attackers to conduct session fixation attacks.

  - CVE-2010-1614     Multiple cross-site scripting (XSS) vulnerabilities     allow remote attackers to inject arbitrary web script or     HTML via vectors related to (1) the Login-As feature or     (2) when the global search feature is enabled,     unspecified global search forms in the Global Search     Engine.

  - CVE-2010-1615     Multiple SQL injection vulnerabilities allow remote     attackers to execute arbitrary SQL commands via vectors     related to (1) the add_to_log function in     mod/wiki/view.php in the wiki module, or (2) 'data     validation in some forms elements' related to     lib/form/selectgroups.php.

  - CVE-2010-1616     Moodle can create new roles when restoring a course,     which allows teachers to create new accounts even if     they do not have the moodle/user:create capability.

  - CVE-2010-1617     user/view.php does not properly check a role, which     allows remote authenticated users to obtain the full     names of other users via the course profile page.

  - CVE-2010-1618     A Cross-site scripting (XSS) vulnerability in the phpCAS     client library allows remote attackers to inject     arbitrary web script or HTML via a crafted URL, which is     not properly handled in an error message.

  - CVE-2010-1619     A Cross-site scripting (XSS) vulnerability in the     fix_non_standard_entities function in the KSES HTML text     cleaning library (weblib.php) allows remote attackers to     inject arbitrary web script or HTML via crafted HTML     entities.

  - CVE-2010-2228     A Cross-site scripting (XSS) vulnerability in the MNET     access-control interface allows remote attackers to     inject arbitrary web script or HTML via vectors     involving extended characters in a username.

  - CVE-2010-2229     Multiple cross-site scripting (XSS) vulnerabilities in     blog/index.php allow remote attackers to inject     arbitrary web script or HTML via unspecified parameters.

  - CVE-2010-2230     The KSES text cleaning filter in lib/weblib.php does not     properly handle vbscript URIs, which allows remote     authenticated users to conduct cross-site scripting     (XSS) attacks via HTML input.

  - CVE-2010-2231     A Cross-site request forgery (CSRF) vulnerability in     report/overview/report.php in the quiz module allows     remote attackers to hijack the authentication of     arbitrary users for requests that delete quiz attempts     via the attemptid parameter.

Moodle version 1.9.8 fixes several security issues including cross-site-scripting (XSS) and SQL injection bugs (CVE-2010-1613, CVE-2010-1614, CVE-2010-1615, CVE-2010-1616, CVE-2010-1617 CVE-2010-1618, CVE-2010-1619).

The version of Moodle installed on the remote host is potentially vulnerable to multiple flaws.

  - Multiple unspecified cross-site scripting vulnerabilities in the KSES text cleaning library. (MSA-10-0001)

  - A cross-site scripting vulnerability exists in the PHP CAS client library. Note that this only affects Moodle installations that use CAS authentication. (MSA-10-0002)

  - An issue exists in the course profile page which allows ordinary users to find out the names of other users. (MSA-10-0003)

  - The restoring of courses sometimes results in creation of new roles. (MSA-10-0004)

  - A SQL injection vulnerability exists in several forms. (MSA-10-0005)

  - Data passed to the 'add_to_log()' function in the wiki module is not properly sanitized which could allow SQL injection attacks. (MSA-10-0006)

  - A problem exists in the handling of user submitted data in global search forms. (MSA-10-0007)

  - A persistent cross-site scripting issue exists when an admin uses the Login-as feature. (MSA-10-0008)

  - The 'Regenerate session id during login' setting is not enabled by default. (MSA-10-0009)

ID	Name	Product	Family	Severity
49717	Debian DSA-2115-1 : moodle - several vulnerabilities	Nessus	Debian Local Security Checks	high
46233	openSUSE Security Update : moodle (openSUSE-SU-2010:0212-1)	Nessus	SuSE Local Security Checks	high
46230	openSUSE Security Update : moodle (openSUSE-SU-2010:0212-1)	Nessus	SuSE Local Security Checks	high
5504	Moodle < 1.8.12 / 1.9.x < 1.9.8 Multiple Vulnerabilities	Nessus Network Monitor	CGI	high

Detections

Analytics

CVE-2010-1617

medium

Tenable Plugins

high

high

high

high