CVE-2006-4785

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-14 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.

Affected products

Moodle: through 1.6.1

References

http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
http://secunia.com/advisories/21899
http://securitytracker.com/id?1016877
http://www.attrition.org/pipermail/vim/2006-September/001038.html
http://www.attrition.org/pipermail/vim/2006-September/001040.html
http://www.securityfocus.com/archive/1/446227/100/0/threaded
http://www.securityfocus.com/bid/19995
http://www.securityfocus.com/bid/20085
http://www.vupen.com/english/advisories/2006/3591
https://exchange.xforce.ibmcloud.com/vulnerabilities/28904
https://exchange.xforce.ibmcloud.com/vulnerabilities/29001
http://docs.moodle.org/en/Release_notes#Moodle_1.6.2

Get alerted when CVE-2006-4785 or the next vulnerability affects your stack