Upstream information
CVE-2009-0500 at MITRE
Description
Cross-site scripting (XSS) vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log report.
NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Novell/SUSE information
Novell Bugzilla entry:
475111
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|
| openSUSE 10.3 | moodle >= 1.8.2-17.12moodle-af >= 1.8.2-17.12moodle-ar >= 1.8.2-17.12moodle-be >= 1.8.2-17.12moodle-bg >= 1.8.2-17.12moodle-bs >= 1.8.2-17.12moodle-ca >= 1.8.2-17.12moodle-cs >= 1.8.2-17.12moodle-da >= 1.8.2-17.12moodle-de >= 1.8.2-17.12moodle-de_du >= 1.8.2-17.12moodle-el >= 1.8.2-17.12moodle-es >= 1.8.2-17.12moodle-et >= 1.8.2-17.12moodle-eu >= 1.8.2-17.12moodle-fa >= 1.8.2-17.12moodle-fi >= 1.8.2-17.12moodle-fr >= 1.8.2-17.12moodle-ga >= 1.8.2-17.12moodle-gl >= 1.8.2-17.12moodle-he >= 1.8.2-17.12moodle-hi >= 1.8.2-17.12moodle-hr >= 1.8.2-17.12moodle-hu >= 1.8.2-17.12moodle-id >= 1.8.2-17.12moodle-is >= 1.8.2-17.12moodle-it >= 1.8.2-17.12moodle-ja >= 1.8.2-17.12moodle-ka >= 1.8.2-17.12moodle-km >= 1.8.2-17.12moodle-kn >= 1.8.2-17.12moodle-ko >= 1.8.2-17.12moodle-lt >= 1.8.2-17.12moodle-lv >= 1.8.2-17.12moodle-mi_tn >= 1.8.2-17.12moodle-ms >= 1.8.2-17.12moodle-nl >= 1.8.2-17.12moodle-nn >= 1.8.2-17.12moodle-no >= 1.8.2-17.12moodle-pl >= 1.8.2-17.12moodle-pt >= 1.8.2-17.12moodle-ro >= 1.8.2-17.12moodle-ru >= 1.8.2-17.12moodle-sk >= 1.8.2-17.12moodle-sl >= 1.8.2-17.12moodle-so >= 1.8.2-17.12moodle-sq >= 1.8.2-17.12moodle-sr >= 1.8.2-17.12moodle-sv >= 1.8.2-17.12moodle-th >= 1.8.2-17.12moodle-tl >= 1.8.2-17.12moodle-tr >= 1.8.2-17.12moodle-uk >= 1.8.2-17.12moodle-vi >= 1.8.2-17.12moodle-zh_cn >= 1.8.2-17.12
| |
