Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) the add_to_log function in mod/wiki/view.php in the wiki module, or (2) "data validation in some forms elements" related to lib/form/selectgroups.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Moodle多个SQL注入漏洞
Vulnerability Description
Moodle是一款教育相关的管理系统,包括信息的获取、传递、交流。 Moodle存在多个SQL注入漏洞,远程攻击者可以通过(1)wiki模块mod/wiki/view.php的add_to_log 函数,或(2)lib/form/selectgroups.php.相关的“某些表单元素的数据验证”的相关向量执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A