Note:

If you want to create a new page for developers, you should create it on the Moodle Developer Resource site.

Moodle 1.8.12 release notes

From MoodleDocs

Revision as of 13:41, 31 March 2010 by Helen Foster (talk | contribs) (→‎Security issues: MSA 10-0001 to 0003 and 0006 to 0008)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Jump to:navigation, search

Release date: 27th March 2010

Here is the full list of fixed issues in 1.8.12.

Functional changes

None, just bug fixes

Security issues

MSA-10-0001 Vulnerability in KSES text cleaning
MSA-10-0002 XSS vulnerabilty in the phpcas module
MSA-10-0003 Disclosure of full user names* MSA-10-0005 Incorrect validation of forms data
MSA-10-0006 SQL injection in Wiki module
MSA-10-0007 Reflective Cross Site Scripting (XSS) in the Moodle Global Search Engine
MSA-10-0008 Persistent XSS when using Login-as feature
MSA-10-0009 Session fixation prevention now turned on by default

See also

Moodle 1.8.11 release notes

Retrieved from "https://docs.moodle.org/dev/index.php?title=Moodle_1.8.12_release_notes&oldid=25491"