CVE-2012-1155

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
MoodleMoodle2.2.x; 2.1.x; 2.0.x; 1.9.x

References

Timeline

Published
Nov 14, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-11567.5Moodle before 2.2.2 has users' private files included in course backupsCVE-2012-11574.3Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by defaultCVE-2012-11584.3Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in exportCVE-2012-11594.3Moodle before 2.2.2: Overview report allows users to see hidden coursesCVE-2012-11602.7Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.phpCVE-2012-11614.3Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search resultsCVE-2012-11627.5Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (CVE-2012-11636.8Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size aCVE-2012-11642.6slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search CVE-2012-11655.0The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a deniCVE-2012-116610.0The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via thCVE-2012-11674.6The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platfor
CVE-2012-1155: High severity, CVSS 7.5 | Vulnix