backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://docs.moodle.org/en/Release_notes#Moodle_1.6.2 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2006-09-23T00:00:00Z
Updated: 2024-09-16T17:38:07.226Z
Reserved: 2006-09-22T00:00:00Z
Link: CVE-2006-4939
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2006-09-23T00:07:00.000
Modified: 2020-12-01T14:43:40.520
Link: CVE-2006-4939
Redhat
No data.