CVE-2013-1834

Published: Mar 25, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified (1) userid or (2) courseid field.

Affected (55)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 1.9.10
Moodle Moodle	Version 1.9.11
Moodle Moodle	Version 1.9.12
Moodle Moodle	Version 1.9.13
Moodle Moodle	Version 1.9.14
Moodle Moodle	Version 1.9.15
Moodle Moodle	Version 1.9.16
Moodle Moodle	Version 1.9.17
Moodle Moodle	Version 1.9.18
Moodle Moodle	Version 1.9.19
Moodle Moodle	Version 1.9.1
Moodle Moodle	Version 1.9.2
Moodle Moodle	Version 1.9.3
Moodle Moodle	Version 1.9.4
Moodle Moodle	Version 1.9.5
Moodle Moodle	Version 1.9.6
Moodle Moodle	Version 1.9.7
Moodle Moodle	Version 1.9.8
Moodle Moodle	Version 1.9.9

Configuration B

21 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.0.0
Moodle Moodle	Version 2.0.1
Moodle Moodle	Version 2.0.2
Moodle Moodle	Version 2.0.3
Moodle Moodle	Version 2.0.4
Moodle Moodle	Version 2.0.5
Moodle Moodle	Version 2.0.6
Moodle Moodle	Version 2.0.7
Moodle Moodle	Version 2.0.8
Moodle Moodle	Version 2.0.9
Moodle Moodle	Version 2.1.0
Moodle Moodle	Version 2.1.10
Moodle Moodle	Version 2.1.1
Moodle Moodle	Version 2.1.2
Moodle Moodle	Version 2.1.3
Moodle Moodle	Version 2.1.4
Moodle Moodle	Version 2.1.5
Moodle Moodle	Version 2.1.6
Moodle Moodle	Version 2.1.7
Moodle Moodle	Version 2.1.8
Moodle Moodle	Version 2.1.9

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2
Moodle Moodle	Version 2.2.3
Moodle Moodle	Version 2.2.4
Moodle Moodle	Version 2.2.5
Moodle Moodle	Version 2.2.6
Moodle Moodle	Version 2.2.7