CVE-2009-4304

CVE-2009-4304 describes a vulnerability in Moodle versions 1.8 before 1.8.11 and 1.9 before 1.9.7, where the absence of a random password salt in config.php facilitates brute-force password guessing. This vulnerability carries a CVSS score of 7.5, indicating a high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.