Secunia Security Advisory – Debian has issued an update for moodle. This fixes a security issue and some vulnerabilities, which can be exploited by malicious users to disclose potentially sensitive information, bypass certain security restrictions, and conduct SQL injection attacks and by malicious people to conduct cross-site request forgery attacks and bypass certain security restrictions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/85904/sa38360.txt
Source: https://packetstormsecurity.com/files/85904/Secunia-Security-Advisory-38360.html