A vulnerability classified as problematic was found in Moodle (Learning Management Software). Affected by this vulnerability is an unknown functionality in the library lib/formslib.php. As an impact it is known to affect integrity. The summary by CVE is:

The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms API setConstant operations, which allows remote attackers to submit unexpected form content by modifying the values of constant fields.

The weakness was disclosed 07/11/2012 as MDL-23872 Forms Library : Updated MoodleQuickForm to honour setConstant(), prevents... as confirmed git commit (GIT Repository). The advisory is shared at git.moodle.org. This vulnerability is known as CVE-2011-4301 since 11/04/2011. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available.

By approaching the search of inurl:lib/formslib.php it is possible to find vulnerable targets with Google Hacking.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.moodle.org.

The entries 61241, 61240, 61239 and 61238 are pretty similar.

Productinfo

Type

• Learning Management Software

Name

• Moodle

Version

• 1.9
• 1.9.2
• 1.9.3
• 1.9.4
• 1.9.5
• 1.9.6
• 1.9.7
• 1.9.8
• 1.9.9
• 1.9.10
• 1.9.11
• 1.9.12
• 1.9.13
• 2.0
• 2.0.1
• 2.0.2
• 2.0.3
• 2.0.4
• 2.1
• 2.1.1

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion