Description
Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.
References
- http://docs.moodle.org/en/Release_Notes#Moodle_1.6.2
- 19995 vdb-entry
- 21899 third-party-advisory
- moodle-help-information-disclosure(28903) vdb-entry
- ADV-2006-3591 vdb-entry