class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7,
    2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject
    arbitrary e-mail headers via vectors involving a crafted (1) From: or (2) Sender: header. (CVE-2012-0796)

Several security issues have been fixed in Moodle, a course management system for online learning :

  - CVE-2011-4308 / CVE-2012-0792     Rossiani Wijaya discovered an information leak in     mod/forum/user.php.

  - CVE-2011-4584     MNet authentication didn't prevent a user using 'Login     as' from jumping to a remove MNet SSO.

  - CVE-2011-4585     Darragh Enright discovered that the change password form     was send in over plain HTTP even if httpslogin was set     to 'true'.

  - CVE-2011-4586     David Michael Evans and German Sanchez Gances discovered     CRLF injection/HTTP response splitting vulnerabilities     in the Calendar module.

  - CVE-2011-4587     Stephen Mc Guiness discovered empty passwords could be     entered in some circumstances.

  - CVE-2011-4588     Patrick McNeill discovered that IP address restrictions     could be bypassed in MNet.

  - CVE-2012-0796     Simon Coggins discovered that additional information     could be injected into mail headers.

  - CVE-2012-0795     John Ehringer discovered that email addresses were     insufficiently validated.

  - CVE-2012-0794     Rajesh Taneja discovered that cookie encryption used a     fixed key.

  - CVE-2012-0793     Eloy Lafuente discovered that profile images were     insufficiently protected. A new configuration option     'forceloginforprofileimages' was introduced for that.

ID	Name	Product	Family	Severity
434556	SCA: security update for phpmailer/phpmailer (GHSA-398j-f7m7-795j)	Tenable Cloud Security	SCA Checks	medium
434556	SCA: security update for phpmailer/phpmailer (GHSA-398j-f7m7-795j)	Tenable Self-Hosted Container Security	SCA Checks	medium
58172	Debian DSA-2421-1 : moodle - several vulnerabilities	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2012-0796

medium

Tenable Plugins

medium

medium

medium