CVE-2009-0500

Published: Feb 10, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report.

Affected (25)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 1.6.0
Moodle Moodle	Version 1.6.1
Moodle Moodle	Version 1.6.2
Moodle Moodle	Version 1.6.3
Moodle Moodle	Version 1.6.4
Moodle Moodle	Version 1.6.5
Moodle Moodle	Version 1.6.6
Moodle Moodle	Version 1.6.7
Moodle Moodle	Version 1.6.8
Moodle Moodle	Version 1.7.1
Moodle Moodle	Version 1.7.2
Moodle Moodle	Version 1.7.3
Moodle Moodle	Version 1.7.4
Moodle Moodle	Version 1.7.5
Moodle Moodle	Version 1.7.6
Moodle Moodle	Version 1.8.1
Moodle Moodle	Version 1.8.2
Moodle Moodle	Version 1.8.3
Moodle Moodle	Version 1.8.4
Moodle Moodle	Version 1.8.5
Moodle Moodle	Version 1.8.6
Moodle Moodle	Version 1.8.7
Moodle Moodle	Version 1.9.1
Moodle Moodle	Version 1.9.2
Moodle Moodle	Version 1.9.3