Upstream information
CVE-2009-0499 at MITRE
Description
Cross-site request forgery (CSRF) vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php.
Novell/SUSE information
Novell Bugzilla entry:
475111
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|
| openSUSE 10.3 | moodle >= 1.8.2-17.12moodle-af >= 1.8.2-17.12moodle-ar >= 1.8.2-17.12moodle-be >= 1.8.2-17.12moodle-bg >= 1.8.2-17.12moodle-bs >= 1.8.2-17.12moodle-ca >= 1.8.2-17.12moodle-cs >= 1.8.2-17.12moodle-da >= 1.8.2-17.12moodle-de >= 1.8.2-17.12moodle-de_du >= 1.8.2-17.12moodle-el >= 1.8.2-17.12moodle-es >= 1.8.2-17.12moodle-et >= 1.8.2-17.12moodle-eu >= 1.8.2-17.12moodle-fa >= 1.8.2-17.12moodle-fi >= 1.8.2-17.12moodle-fr >= 1.8.2-17.12moodle-ga >= 1.8.2-17.12moodle-gl >= 1.8.2-17.12moodle-he >= 1.8.2-17.12moodle-hi >= 1.8.2-17.12moodle-hr >= 1.8.2-17.12moodle-hu >= 1.8.2-17.12moodle-id >= 1.8.2-17.12moodle-is >= 1.8.2-17.12moodle-it >= 1.8.2-17.12moodle-ja >= 1.8.2-17.12moodle-ka >= 1.8.2-17.12moodle-km >= 1.8.2-17.12moodle-kn >= 1.8.2-17.12moodle-ko >= 1.8.2-17.12moodle-lt >= 1.8.2-17.12moodle-lv >= 1.8.2-17.12moodle-mi_tn >= 1.8.2-17.12moodle-ms >= 1.8.2-17.12moodle-nl >= 1.8.2-17.12moodle-nn >= 1.8.2-17.12moodle-no >= 1.8.2-17.12moodle-pl >= 1.8.2-17.12moodle-pt >= 1.8.2-17.12moodle-ro >= 1.8.2-17.12moodle-ru >= 1.8.2-17.12moodle-sk >= 1.8.2-17.12moodle-sl >= 1.8.2-17.12moodle-so >= 1.8.2-17.12moodle-sq >= 1.8.2-17.12moodle-sr >= 1.8.2-17.12moodle-sv >= 1.8.2-17.12moodle-th >= 1.8.2-17.12moodle-tl >= 1.8.2-17.12moodle-tr >= 1.8.2-17.12moodle-uk >= 1.8.2-17.12moodle-vi >= 1.8.2-17.12moodle-zh_cn >= 1.8.2-17.12
| |
