Intrusion PreventionMoodle.h5p.Activity.Web.Service.SQL.Injection
Description
This indicates an attack attempt to exploit an SQL Injection Vulnerability in Moodle.
The vulnerabilities is due to insufficient input validation. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target system. Successful exploitation can result in remote code execution under the security context of the database service.
Affected Products
Moodle versions 3.11 to 3.11.4
Impact
System Compromise: Remote attackers can add, view, delete or modify data in the database of the affected application
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://download.moodle.org/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2022-06-27 | 21.345 | Sig Added |
| 2022-06-23 | 21.344 | Default_action:pass:drop |
| 2022-06-14 | 21.338 |
| ID | 51652 |
| Created | Jun 06, 2022 |
| Updated | Jun 12, 2023 |
| Risk |
|
| CVE ID | CVE-2022-0332 |
| Exploit Prediction Score | 0.24% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | PHP_app |