CVE-2011-4299

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-4299
Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitrary web script or HTML via a wiki comment.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7
http://moodle.org/mod/forum/discuss.php?d=188310 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=747444 Patch
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7
http://moodle.org/mod/forum/discuss.php?d=188310 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=747444 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*
History

21 Nov 2024, 01:32

Type Values Removed Values Added
References () http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7 - () http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7 -
References () http://moodle.org/mod/forum/discuss.php?d=188310 - Vendor Advisory () http://moodle.org/mod/forum/discuss.php?d=188310 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=747444 - Patch () https://bugzilla.redhat.com/show_bug.cgi?id=747444 - Patch

07 Nov 2023, 02:09

Type Values Removed Values Added
References
  • {'url': 'http://git.moodle.org/gw?p=moodle.git;a=commit;h=a459fd90625ae44d7b3ac10b65da2dc631a418e7', 'name': 'http://git.moodle.org/gw?p=moodle.git;a=commit;h=a459fd90625ae44d7b3ac10b65da2dc631a418e7', 'tags': [], 'refsource': 'CONFIRM'}
  • () http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=a459fd90625ae44d7b3ac10b65da2dc631a418e7 -
Information

Published : 2012-07-11 10:26

Updated : 2025-04-11 00:51

NVD link : CVE-2011-4299

Mitre link : CVE-2011-4299

CVE.ORG link : CVE-2011-4299

JSON object : View

Products Affected

moodle

  • moodle
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')