Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2013-4313

Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remote attackers to conduct SQL injection attacks against Microsoft SQL Server via a crafted string.

  • Published: Sep 16, 2013
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-4313
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
Composer icon moodle / moodle 2.3.8 2.3.8.x
Composer icon moodle / moodle 2.5.1 2.5.1.x
Composer icon moodle / moodle 2.3.4 2.3.4.x
Composer icon moodle / moodle 2.2.2 2.2.2.x
Composer icon moodle / moodle 2.3.1 2.3.1.x
Composer icon moodle / moodle 2.4.3 2.4.3.x
Composer icon moodle / moodle 2.4.1 2.4.1.x
Composer icon moodle / moodle - 2.2.11.x
Composer icon moodle / moodle 2.2.9 2.2.9.x
Composer icon moodle / moodle 2.4.2 2.4.2.x
Composer icon moodle / moodle 2.2.6 2.2.6.x
Composer icon moodle / moodle 2.3.6 2.3.6.x
Composer icon moodle / moodle 2.2.8 2.2.8.x
Composer icon moodle / moodle 2.3.5 2.3.5.x
Composer icon moodle / moodle 2.4.4 2.4.4.x
Composer icon moodle / moodle 2.3.3 2.3.3.x
Composer icon moodle / moodle 2.2.10 2.2.10.x
Composer icon moodle / moodle 2.2.1 2.2.1.x
Composer icon moodle / moodle 2.2.7 2.2.7.x
Composer icon moodle / moodle 2.2.3 2.2.3.x
Composer icon moodle / moodle 2.2.5 2.2.5.x
Composer icon moodle / moodle 2.3.7 2.3.7.x
Composer icon moodle / moodle 2.3.2 2.3.2.x
Composer icon moodle / moodle 2.2.4 2.2.4.x
Composer icon moodle / moodle 2.4.5 2.4.5.x
Composer icon moodle / moodle 2.2.0 2.2.0.x
Composer icon moodle / moodle 2.3.0 2.3.0.x
Composer icon moodle / moodle 2.4.0 2.4.0.x
Composer icon moodle / moodle 2.5.0 2.5.0.x