Candidate: CVE-2012-0801 PublicDate: 2012-07-17 10:20:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0801 http://openwall.com/lists/oss-security/2012/01/20/22 Description: lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a form element, which has unspecified impact and remote attack vectors. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_moodle: upstream: http://git.moodle.org/gw?p=moodle.git;a=commit;h=51070abc78b9e1db1db9a44855e8623b22bebd48 upstream_moodle: released (1.9.16) hardy_moodle: ignored (reached end-of-life) lucid_moodle: ignored (reached end-of-life) maverick_moodle: ignored (reached end-of-life) natty_moodle: ignored (reached end-of-life) oneiric_moodle: ignored (reached end-of-life) precise_moodle: ignored (reached end-of-life) precise/esm_moodle: DNE (precise was needed) quantal_moodle: not-affected (2.2.2.dfsg-2) raring_moodle: not-affected (2.2.2.dfsg-2) saucy_moodle: not-affected (2.2.2.dfsg-2) trusty_moodle: not-affected (2.2.2.dfsg-2) trusty/esm_moodle: DNE (trusty was not-affected [2.2.2.dfsg-2]) utopic_moodle: not-affected (2.2.2.dfsg-2) vivid_moodle: not-affected (2.2.2.dfsg-2) vivid/stable-phone-overlay_moodle: DNE vivid/ubuntu-core_moodle: DNE wily_moodle: not-affected (2.2.2.dfsg-2) xenial_moodle: not-affected (2.2.2.dfsg-2) yakkety_moodle: not-affected (2.2.2.dfsg-2) zesty_moodle: not-affected (2.2.2.dfsg-2) devel_moodle: not-affected (2.2.2.dfsg-2)