← Database

CVE-2009-4297

MEDIUM CVSS: 6.8 Published: 2009-12-16 Modified: 2026-06-16

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected Platforms

Moodle Moodle

Weakness Type

CWE-352

References