Launchpad.net

CVE 2012-0792

mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.

See the CVE page on Mitre.org for more details.