ID CVE-2016-3734
Summary Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read.
References
Vulnerable Configurations
CVSS
Base: None
Impact: -
Exploitability:-
Nessus vFeed
nessus_script_family FreeBSD Local Security Checks
nessus_script_file freebsd_pkg_8656cf5f417011e68dfe002590263bf5.nasl
nessus_script_id 91930
nessus_script_name FreeBSD : moodle -- multiple vulnerabilities (8656cf5f-4170-11e6-8dfe-002590263bf5)
Openvas vFeed
openvas_script_family Fedora Local Security Checks
openvas_script_file gb_fedora_2016_286bacdbfb_moodle_fc23.nasl
openvas_script_id 65787
openvas_script_name Fedora Update for moodle FEDORA-2016-286bacdbfb
Last major update 20-04-2017 - 21:59
Published 20-04-2017 - 21:59
Last modified 22-04-2017 - 01:59
Back to Top