CVE-2006-4938 - help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message

Back Back to CVE browser

MEDIUM

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message

Published Sep 23, 2006

4.0

MEDIUM

CVSS 2.0

EPSS 0.98%

Description

help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
x_refsource_CONFIRM

Link	Providers	Tags
http://docs.moodle.org/en/Release_notes#Moodle_1.6.2		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 23, 2006

Updated Sep 16, 2024

Reserved Sep 22, 2006

Link CVE-2006-4938

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4938

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4938