Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2012-6099

The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.

  • Published: Jan 27, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2012-6099
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4
  • AV:N/AC:L/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
Composer icon moodle / moodle 2.1.2 2.1.2.x
Composer icon moodle / moodle 2.1.8 2.1.8.x
Composer icon moodle / moodle 2.1.9 2.1.9.x
Composer icon moodle / moodle 2.1.1 2.1.1.x
Composer icon moodle / moodle 2.1.5 2.1.5.x
Composer icon moodle / moodle 2.1.6 2.1.6.x
Composer icon moodle / moodle 2.1.3 2.1.3.x
Composer icon moodle / moodle 2.1.7 2.1.7.x
Composer icon moodle / moodle 2.1.4 2.1.4.x
Composer icon moodle / moodle 2.1.0 2.1.0.x
Composer icon moodle / moodle 2.2.2 2.2.2.x
Composer icon moodle / moodle 2.2.6 2.2.6.x
Composer icon moodle / moodle 2.2.1 2.2.1.x
Composer icon moodle / moodle 2.2.3 2.2.3.x
Composer icon moodle / moodle 2.2.5 2.2.5.x
Composer icon moodle / moodle 2.2.4 2.2.4.x
Composer icon moodle / moodle 2.2.0 2.2.0.x
Composer icon moodle / moodle 2.3.1 2.3.1.x
Composer icon moodle / moodle 2.3.3 2.3.3.x
Composer icon moodle / moodle 2.3.2 2.3.2.x
Composer icon moodle / moodle 2.3.0 2.3.0.x
Composer icon moodle / moodle 2.4.0 2.4.0.x