Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2011-4133

Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

  • Published: Jul 16, 2012
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-4133
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
Composer icon moodle / moodle 1.9.4 1.9.4.x
Composer icon moodle / moodle 1.9.1 1.9.1.x
Composer icon moodle / moodle 1.9.6 1.9.6.x
Composer icon moodle / moodle 1.9.9 1.9.9.x
Composer icon moodle / moodle 1.9.2 1.9.2.x
Composer icon moodle / moodle 1.9.10 1.9.10.x
Composer icon moodle / moodle 1.9.3 1.9.3.x
Composer icon moodle / moodle 1.9.5 1.9.5.x
Composer icon moodle / moodle 1.9.8 1.9.8.x
Composer icon moodle / moodle 1.9.7 1.9.7.x