CVE-2009-4300 in Moodle

Riassunto

di VulDB • 25/06/2026

Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 11/12/2009
• Divulgazione: 15/12/2009
• Moderazione: accettato
• Voce: VDB-51157
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.02216
• KEV: no
• Attività: molto basso
• Settore: Police, Education

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2009-4300
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2009-4300
• CVE Details: https://www.cvedetails.com/cve/CVE-2009-4300/