CVE-2012-0792
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the...
CVE-2012-0792 is a medium vulnerability (CVSS 4.0) in Moodle, published February 29, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.12%, the 66th percentile. Fixed in moodle 1.9.9.dfsg2-2.1+squeeze3.
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.
Exploit likelihood
What each source reports
NVD Score used
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.
- Record
CVE-2012-0792- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.
- Record
CVE-2012-0792- Updated
- 2026-11-02
EUVDEUVD-2012-0823 No score
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.
- Record
EUVD-2012-0823- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xf8x-2jhx-xp6x No score
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the...
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.
- Record
GHSA-xf8x-2jhx-xp6x- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
moodleDebian:6.0 |
before 1.9.9.dfsg2-2.1+squeeze3, plus listed versions 1.9.9.dfsg2-2.11.9.9.dfsg2-2.1+squeeze11.9.9.dfsg2-2.1+squeeze2 |
1.9.9.dfsg2-2.1+squeeze3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=36b0ddeed45d0751508dcd9fa50f17fda43bae54
moodle.org/mod/forum/discuss.php?d=194009
debian.org/security/2012/dsa-2421
bugzilla.redhat.com/show_bug.cgi?id=783532
nvd.nist.gov/vuln/detail/CVE-2012-0792
github.com/advisories/GHSA-xf8x-2jhx-xp6x