CVE-2006-4936

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2006-09-23

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Moodle (Moodle)

References

• http://docs.moodle.org/en/Release_notes#Moodle_1.6.2