CVE-2016-7919

Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the installation process component. NOTE: the vendor disputes the relevance of this report, noting that "the person who is installing Moodle must know database access credentials and they can access the database directly; there is no need for them to create a SQL injection in one of the installation dialogue fields.

• CWE-89
• CWE-200
• CWE-89

• http://www.securityfocus.com/bid/93971Third Party Advisory, VDB Entry
• https://tracker.moodle.org/browse/MDL-56298Issue Tracking
• https://www.youtube.com/watch?v=pQS1GdQ3CBcExploit, Third Party Advisory
• http://www.securityfocus.com/bid/93971Third Party Advisory, VDB Entry
• https://tracker.moodle.org/browse/MDL-56298Issue Tracking
• https://www.youtube.com/watch?v=pQS1GdQ3CBcExploit, Third Party Advisory

Published

Oct 28, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7912Use-after-free vulnerability in the ffs_user_copy_worker fun…7.8
• CVE-2016-7913The xc2028_set_config function in drivers/media/tuners/tuner…7.8
• CVE-2016-7914The assoc_array_insert_into_terminal_node function in lib/as…
• CVE-2016-7915The hid_input_field function in drivers/hid/hid-core.c in th…
• CVE-2016-7916Race condition in the environ_read function in fs/proc/base.…
• CVE-2016-7917The nfnetlink_rcv_batch function in net/netfilter/nfnetlink.…
• CVE-2016-7921Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-7922The AH parser in tcpdump before 4.9.0 has a buffer overflow …
• CVE-2016-7923The ARP parser in tcpdump before 4.9.0 has a buffer overflow…
• CVE-2016-7924The ATM parser in tcpdump before 4.9.0 has a buffer overflow…
• CVE-2016-7925The compressed SLIP parser in tcpdump before 4.9.0 has a buf…
• CVE-2016-7926The Ethernet parser in tcpdump before 4.9.0 has a buffer ove…