Evil-DB LogoEvil-DB
← All CVEs

CVE-2017-2641

critical · 9.8

In Moodle 2.x and 3.x, SQL injection can occur via user preferences.

9.8
CVSS
14.5%
EPSS (exploit prob.)
96th
EPSS percentile
2017-03-26
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

VendorProductAffected versions
moodlemoodle2.7.0
moodlemoodle2.7.0
moodlemoodle2.7.0
moodlemoodle2.7.0
moodlemoodle2.7.1
moodlemoodle2.7.2
moodlemoodle2.7.3
moodlemoodle2.7.4
moodlemoodle2.7.5
moodlemoodle2.7.6
moodlemoodle2.7.7
moodlemoodle2.7.8
moodlemoodle2.7.9
moodlemoodle2.7.10
moodlemoodle2.7.11
moodlemoodle2.7.12
moodlemoodle2.7.13
moodlemoodle2.7.14
moodlemoodle2.7.15
moodlemoodle2.7.16
moodlemoodle2.7.17
moodlemoodle2.7.18
moodlemoodle3.0.0
moodlemoodle3.0.0
moodlemoodle3.0.0
moodlemoodle3.0.0
moodlemoodle3.0.0
moodlemoodle3.0.0
moodlemoodle3.0.1
moodlemoodle3.0.2
moodlemoodle3.0.3
moodlemoodle3.0.4
moodlemoodle3.0.5
moodlemoodle3.0.6
moodlemoodle3.0.7
moodlemoodle3.0.8
moodlemoodle3.1.0
moodlemoodle3.1.0
moodlemoodle3.1.0
moodlemoodle3.1.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-2641