Upstream information
CVE-2008-5432 at MITRE
Description
Cross-site scripting (XSS) vulnerability in Moodle before 1.6.8, 1.7 before 1.7.6, 1.8 before 1.8.7, and 1.9 before 1.9.3 allows remote attackers to inject arbitrary web script or HTML via a Wiki page name (aka page title).
NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Novell/SUSE information
Novell Bugzilla entry:
457599
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|
| openSUSE 10.3 | moodle >= 1.8.2-17.10moodle-af >= 1.8.2-17.10moodle-ar >= 1.8.2-17.10moodle-be >= 1.8.2-17.10moodle-bg >= 1.8.2-17.10moodle-bs >= 1.8.2-17.10moodle-ca >= 1.8.2-17.10moodle-cs >= 1.8.2-17.10moodle-da >= 1.8.2-17.10moodle-de >= 1.8.2-17.10moodle-de_du >= 1.8.2-17.10moodle-el >= 1.8.2-17.10moodle-es >= 1.8.2-17.10moodle-et >= 1.8.2-17.10moodle-eu >= 1.8.2-17.10moodle-fa >= 1.8.2-17.10moodle-fi >= 1.8.2-17.10moodle-fr >= 1.8.2-17.10moodle-ga >= 1.8.2-17.10moodle-gl >= 1.8.2-17.10moodle-he >= 1.8.2-17.10moodle-hi >= 1.8.2-17.10moodle-hr >= 1.8.2-17.10moodle-hu >= 1.8.2-17.10moodle-id >= 1.8.2-17.10moodle-is >= 1.8.2-17.10moodle-it >= 1.8.2-17.10moodle-ja >= 1.8.2-17.10moodle-ka >= 1.8.2-17.10moodle-km >= 1.8.2-17.10moodle-kn >= 1.8.2-17.10moodle-ko >= 1.8.2-17.10moodle-lt >= 1.8.2-17.10moodle-lv >= 1.8.2-17.10moodle-mi_tn >= 1.8.2-17.10moodle-ms >= 1.8.2-17.10moodle-nl >= 1.8.2-17.10moodle-nn >= 1.8.2-17.10moodle-no >= 1.8.2-17.10moodle-pl >= 1.8.2-17.10moodle-pt >= 1.8.2-17.10moodle-ro >= 1.8.2-17.10moodle-ru >= 1.8.2-17.10moodle-sk >= 1.8.2-17.10moodle-sl >= 1.8.2-17.10moodle-so >= 1.8.2-17.10moodle-sq >= 1.8.2-17.10moodle-sr >= 1.8.2-17.10moodle-sv >= 1.8.2-17.10moodle-th >= 1.8.2-17.10moodle-tl >= 1.8.2-17.10moodle-tr >= 1.8.2-17.10moodle-uk >= 1.8.2-17.10moodle-vi >= 1.8.2-17.10moodle-zh_cn >= 1.8.2-17.10
| |
