Skip to content
OpenAdvisories
Unscored CVE-2006-4937 EUVD-2006-4923GHSA-95qp-qwjg-22x9

lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabl…

Published Sep 23, 2006 · Updated Sep 16, 2024 · Assigned by mitre

Description

lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages.

References