CVE-2017-2641

Critical

Published: 26/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Moodle versions 2.x and 3.x, SQL injection vulnerability can occur via user preferences.

An attacker could gain access to sensitive data in the database, potentially leading to serious security breaches.

It is recommended to update Moodle to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

In Moodle 2.x and 3.x, SQL injection can occur via user preferences.