CVE-2011-4287

CVE-2011-4287 describes a vulnerability in Moodle 2.0.x before 2.0.3 where the admin/uploaduser_form.php script fails to enforce password changes for autosubscribed users. This flaw allows remote attackers to gain unauthorized access by exploiting knowledge of a new user's initial password. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring medium attack complexity but potentially leading to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.