CVE-2006-4785 Information

Description

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable which is not properly handled by the insert_record function which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php) which does not convert the data type to an int.

Reference

http://docs.moodle.org/en/Release_notesMoodle_1.6.2 http://secunia.com/advisories/21899 http://securitytracker.com/id?1016877 http://www.attrition.org/pipermail/vim/2006-September/001038.html http://www.attrition.org/pipermail/vim/2006-September/001040.html http://www.securityfocus.com/archive/1/446227/100/0/threaded http://www.securityfocus.com/bid/19995 http://www.securityfocus.com/bid/20085 http://www.vupen.com/english/advisories/2006/3591 https://exchange.xforce.ibmcloud.com/vulnerabilities/28904 https://exchange.xforce.ibmcloud.com/vulnerabilities/29001