CVE-2004-2234: Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.

Security readout for executives and security teams

CVE-2004-2234 describes an old Moodle flaw where a teacher could log in as an administrator in versions before 1.2. That means a lower-privileged user could potentially control the learning platform. The public record does not explain the underlying bug or confirm real-world exploitation. Exposure is most likely limited to legacy Moodle installations running versions earlier than 1.2, especially where teacher accounts exist. Modern Moodle deployments are unlikely to be affected, but old internal, archived, or forgotten learning systems should be checked. Treat this as urgent only if your organization still runs Moodle before 1.2. For affected systems, the business risk is administrator-level compromise of course content, users, and platform configuration by a teacher-level account. Mitigation focus: Identify any Moodle instances and confirm exact versions.; Upgrade affected Moodle installations to version 1.2 or later.; Review Moodle release notes and vendor guidance before production changes..

Prepared

Jun 29, 2026, 19:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.