Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Mar 13, 2007 |
| Suse | — | Upgrade moodle-euUpgrade moodle-itUpgrade moodleUpgrade moodle-zh_cnUpgrade moodle-bsUpgrade moodle-roUpgrade moodle-deUpgrade moodle-nnUpgrade moodle-srUpgrade moodle-knUpgrade moodle-mi_tnUpgrade moodle-csUpgrade moodle-ukUpgrade moodle-arUpgrade moodle-viUpgrade moodle-nlUpgrade moodle-koUpgrade moodle-ruUpgrade moodle-frUpgrade moodle-noUpgrade moodle-heUpgrade moodle-slUpgrade moodle-kmUpgrade moodle-hiUpgrade moodle-elUpgrade moodle-hrUpgrade moodle-idUpgrade moodle-gaUpgrade moodle-trUpgrade moodle-huUpgrade moodle-afUpgrade moodle-esUpgrade moodle-thUpgrade moodle-bgUpgrade moodle-etUpgrade moodle-soUpgrade moodle-fiUpgrade moodle-lvUpgrade moodle-faUpgrade moodle-ptUpgrade moodle-kaUpgrade moodle-beUpgrade moodle-isUpgrade moodle-glUpgrade moodle-tlUpgrade moodle-skUpgrade moodle-ltUpgrade moodle-sqUpgrade moodle-daUpgrade suse-releaseUpgrade moodle-jaUpgrade moodle-plUpgrade moodle-caUpgrade moodle-msUpgrade moodle-sv | Feb 17, 2015 | Mar 12, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub