description: The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.
problem types: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection').
affected:
{
vendor: n/a
product: moodle
versions:
version: Fixed in 4.1.3, 4.0.8, 3.11.14 and 3.9.21, status: affected
}