CVE-2026-102578
EUVD-2026-8971730.09.2026, 09:17
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL (Structured Query Language) injection vulnerability. This issue could allow an attacker to view, alter, or delete sensitive data stored in the underlying database.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| moodle | moodle | 𝑥 < 4.5.13 |
| moodle | moodle | 5.0.0 ≤ 𝑥 < 5.0.9 |
| moodle | moodle | 5.1.0 ≤ 𝑥 < 5.1.6 |
| moodle | moodle | 5.2.0 ≤ 𝑥 < 5.2.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases