CVE-2012-6101

2013-01-2722:00:00

redhat

www.cve.org

moodle

open redirect

vulnerabilities

remote attackers

phishing attacks

backup files edit

comment post

course switch role

wiki files edit

course tags add

user files.

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

64.8%

JSON

Multiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors related to (1) backup/backupfilesedit.php, (2) comment/comment_post.php, (3) course/switchrole.php, (4) mod/wiki/filesedit.php, (5) tag/coursetags_add.php, or (6) user/files.php.