Bypassing Access Restrictions in Moodle 2.0.x and 2.1.x

CVE-2011-4309 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL.

Learn more about our Web Application Penetration Testing UK.