Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 24/03/2007 Updated: 11/10/2017

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Moodle 1.5.2 and previous versions stores sensitive information under the web root with insufficient access control, and provides directory listings, which allows remote malicious users to obtain user names, password hashes, and other sensitive information via a direct request for session (sess_*) files in moodledata/sessions/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
moodle moodle

--/ INTRODUCTION -- /* * * Advisory : MOODLE <= 152 user password read out * Release Date : 17 March 2007 * Application : Moodleorg is a course management system (CMS) * : to help educators create effective online learning communities * Impact : read out user account passwords in md5 hash ...

NVD-CWE-Other http://osvdb.org/43558 https://exchange.xforce.ibmcloud.com/vulnerabilities/33147 https://www.exploit-db.com/exploits/3508 https://nvd.nist.gov https://www.exploit-db.com/exploits/3508/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-1647

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect