Unrated severityNVD Advisory· Published Jul 11, 2012· Updated Jun 16, 2026
CVE-2011-4303
CVE-2011-4303
Description
lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*
- (no CPE)range: <2.0.5, <2.1.2
Patches
Vulnerability mechanics
References
3- moodle.org/mod/forum/discuss.phpnvdPatchVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdPatch
- git.moodle.org/gwnvd
News mentions
0No linked articles in our index yet.