Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Mar 13, 2007 |
| Suse | — | Upgrade moodle-knUpgrade moodle-csUpgrade moodle-heUpgrade moodle-euUpgrade moodle-srUpgrade moodleUpgrade moodle-viUpgrade moodle-arUpgrade moodle-nnUpgrade moodle-nlUpgrade moodle-zh_cnUpgrade moodle-idUpgrade moodle-slUpgrade moodle-bsUpgrade moodle-hrUpgrade moodle-ukUpgrade moodle-hiUpgrade moodle-koUpgrade moodle-deUpgrade moodle-elUpgrade moodle-frUpgrade moodle-mi_tnUpgrade moodle-itUpgrade moodle-kmUpgrade moodle-ruUpgrade moodle-roUpgrade moodle-noUpgrade moodle-daUpgrade moodle-ptUpgrade moodle-glUpgrade moodle-jaUpgrade moodle-lvUpgrade moodle-fiUpgrade moodle-esUpgrade moodle-svUpgrade moodle-trUpgrade moodle-thUpgrade moodle-soUpgrade moodle-faUpgrade moodle-caUpgrade moodle-isUpgrade moodle-kaUpgrade moodle-etUpgrade moodle-tlUpgrade moodle-skUpgrade moodle-msUpgrade moodle-bgUpgrade moodle-beUpgrade moodle-plUpgrade suse-releaseUpgrade moodle-afUpgrade moodle-huUpgrade moodle-ltUpgrade moodle-gaUpgrade moodle-sq | Feb 17, 2015 | Mar 12, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub