Description
SQL injection vulnerability in Moodle Course List 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- moodle-course-unspecified-sql-injection(53895) vdb-entry
- http://drupal.org/node/610986
- 37126 third-party-advisory
- 59100 vdb-entry
- ADV-2009-3001 vdb-entry
- 36787 vdb-entry