CVE-2006-4936

Published: Sep 23, 2006Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

Affected (2)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Up to 1.6.1
Moodle Moodle	Version 1.6.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://docs.moodle.org/en/Release_notes#Moodle_1.6.2

Source: cve@mitre.org

http://docs.moodle.org/en/Release_notes#Moodle_1.6.2

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.