Threats tagged 'ghsa-53qh-jc6r-4vvr'

Moodle versions 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and up to 4.5.15 contain an SQL injection vulnerability in the External database enrolment plugin. This flaw allows editing teachers to inject a payload via the course idnumber field, which executes during scheduled synchronization with MySQL/MariaDB external databases. The vulnerability can lead to unauthorized reading of data and manipulation of enrolment results.