CVE-2009-4302

no score yetEPSS 2.6%

moodle moodle: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.

login/index_form.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these credentials by sniffing.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-310
Published: 2009-12-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

moodle:moodle

References

http://docs.moodle.org/en/Moodle_1.8.11_release_notes
http://docs.moodle.org/en/Moodle_1.9.7_release_notes
http://moodle.org/mod/forum/discuss.php?d=139107
http://secunia.com/advisories/37614
http://www.securityfocus.com/bid/37244

Check your stack JSON