Description
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.
References
- moodle-edit-sql-injection(29001) vdb-entry
- 19995 vdb-entry
- 21899 third-party-advisory
- 20060619 Re: Moodle issue - invalid vendor ack? and extra vulns mailing-list
- 20060919 Moodle issue - invalid vendor ack? and extra vulns mailing-list
- 20085 vdb-entry
- moodle-unspecified-sql-injection(28904) vdb-entry
- 20060917 Sql injection in Moodle mailing-list
- 1016877 vdb-entry
- http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
- ADV-2006-3591 vdb-entry