GHSA-h9w8-4376-j344

Moodle does not properly validate module instance id

Source: GitHub Advisory Database (reviewed) Moderate CVE-2006-4936

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	moodle/moodle	< 1.6.2	1.6.2

Details

As written in the advisory (Markdown source, shown as plain text).

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2006-4936 advisory
https://github.com/moodle/moodle/commit/0f69811d980002709668a2001477a811bfee4bab web
https://github.com/moodle/moodle package
https://web.archive.org/web/20061230195936/http://docs.moodle.org/en/Release_notes#Moodle_1.6.2 web