Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.
CVSS Details
- CVSS 3.1 Base Score: 6.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Jan 12, 2008 |
| Suse | — | Upgrade moodle-zh_cnUpgrade moodle-heUpgrade moodle-isUpgrade moodle-faUpgrade moodle-idUpgrade moodle-hiUpgrade moodle-svUpgrade moodle-caUpgrade moodle-gaUpgrade moodle-koUpgrade moodle-euUpgrade moodle-elUpgrade moodle-ltUpgrade moodle-slUpgrade moodle-noUpgrade suse-releaseUpgrade moodle-mi_tnUpgrade moodle-msUpgrade moodle-esUpgrade moodle-nnUpgrade moodle-huUpgrade moodle-knUpgrade moodle-soUpgrade moodle-de_duUpgrade moodle-glUpgrade moodle-trUpgrade moodle-fiUpgrade moodle-jaUpgrade moodle-kmUpgrade moodle-thUpgrade moodle-viUpgrade moodle-srUpgrade moodle-roUpgrade moodle-beUpgrade moodle-etUpgrade moodleUpgrade moodle-kaUpgrade moodle-ruUpgrade moodle-bsUpgrade moodle-plUpgrade moodle-tlUpgrade moodle-arUpgrade moodle-deUpgrade moodle-nlUpgrade moodle-bgUpgrade moodle-csUpgrade moodle-ptUpgrade moodle-lvUpgrade moodle-hrUpgrade moodle-afUpgrade moodle-frUpgrade moodle-daUpgrade moodle-itUpgrade moodle-ukUpgrade moodle-skUpgrade moodle-sq | Feb 17, 2015 | Jan 11, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub