{"id":"CVE-2012-5480","aliases":["EUVD-2012-5398","GHSA-qw6v-v9vc-qfvq"],"status":"published","title":"The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2...","description":"The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01604,"percentile":0.76002,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2012-11-21T11:00:00Z","modified":"2026-06-16T23:46:51Z","products":[{"vendor":"moodle","product":"moodle"}],"references":[{"url":"http://www.securityfocus.com/bid/56505","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://git.moodle.org/gw?p=moodle.git\u0026a=search\u0026h=HEAD\u0026st=commit\u0026s=MDL-35558","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=216160","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://openwall.com/lists/oss-security/2012/11/19/1","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5480"},{"url":"https://github.com/advisories/GHSA-qw6v-v9vc-qfvq"}],"sources":{"cve":[{"id":"CVE-2012-5480","description":"The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.","status":"published","published":"2012-11-21T11:00:00Z","modified":"2024-08-06T21:05:47.263Z","updated_at":"2026-11-02T14:34:49.246229Z"}],"euvd":[{"id":"EUVD-2012-5398","description":"The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.","status":"published","published":"2012-11-21T11:00:00Z","modified":"2024-08-06T21:05:47Z","updated_at":"2026-11-03T01:56:04.919378Z"}],"ghsa":[{"id":"GHSA-qw6v-v9vc-qfvq","title":"The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2...","description":"The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.","status":"published","published":"2022-05-13T01:13:02Z","modified":"2023-02-01T05:04:00Z","updated_at":"2026-11-02T14:50:07.876412Z"}],"nvd":[{"id":"CVE-2012-5480","description":"The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.","status":"published","published":"2012-11-21T12:55:03.15Z","modified":"2026-06-16T23:46:51.393Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:16.536025Z"}]}}