[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re: Moodle SQL Injection

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Re: Moodle SQL Injection
From: bar@xxxxxxx
Date: 22 Dec 2007 18:43:38 -0000

there is one mrbs contrib block for Moodle too.

Anyway, the missing input validation has been fixed some hours ago in code:

http://cvs.moodle.org/contrib/plugins/blocks/mrbs/web/

Prev by Date: [HSC] Dokeos Multiple Cross-Site Scripting Vulnerabilities
Next by Date: pdflib long filename multiple bufferoverflows
Previous by thread: Re: Moodle SQL Injection
Next by thread: Cryptome: NSA has real-time access to Hushmail servers
Index(es):
- Date
- Thread