CVE-2008-6125

Published: Feb 13, 2009Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors.

Affected (4)

Products: Moodle: Moodle · Debian: Debian Linux

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	From 1.5 to 1.5.4
Moodle Moodle	From 1.6 to 1.6.6
Moodle Moodle	From 1.7 to 1.7.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Related CWEs

CWE-264

References (4)

http://moodle.org/mod/forum/discuss.php?d=87971

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2008/dsa-1691

Source: cve@mitre.org

Third Party Advisory

http://moodle.org/mod/forum/discuss.php?d=87971

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2008/dsa-1691

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.