CVE-2010-1614

Published: Apr 29, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the Login-As feature or (2) when the global search feature is enabled, unspecified global search forms in the Global Search Engine. NOTE: vector 1 might be resultant from a cross-site request forgery (CSRF) vulnerability.

Affected (18)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 1.8.10
Moodle Moodle	Version 1.8.11
Moodle Moodle	Version 1.8.1
Moodle Moodle	Version 1.8.2
Moodle Moodle	Version 1.8.3
Moodle Moodle	Version 1.8.4
Moodle Moodle	Version 1.8.5
Moodle Moodle	Version 1.8.6
Moodle Moodle	Version 1.8.7
Moodle Moodle	Version 1.8.8
Moodle Moodle	Version 1.8.9
Moodle Moodle	Version 1.9.1
Moodle Moodle	Version 1.9.2
Moodle Moodle	Version 1.9.3
Moodle Moodle	Version 1.9.4
Moodle Moodle	Version 1.9.5
Moodle Moodle	Version 1.9.6
Moodle Moodle	Version 1.9.7