Lucene search
MitreCVELIST:CVE-2013-5674HistorySep 16, 2013 - 10:00 a.m.
CVE-2013-5674
2013-09-1610:00:00
mitre
www.cve.org
10
moodle 2.5.x
object injection
remote attackers
php
userid parameter
badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge, which allows remote attackers to conduct PHP object injection attacks via unspecified vectors, as demonstrated by overwriting the value of the userid parameter.
Related
nessus
nessus
Moodle 'external.php' 'badge' Parameter XSS
2013-09-20 00:00:00
packetstorm
packetstorm
Moodle CMS 2.5.0-1 Cross Site Scripting
2013-09-16 00:00:00
nvd
nvd
CVE-2013-5674
2013-09-16 13:02:48
prion
prion
Design/Logic Flaw
2013-09-16 13:02:00
veracode
veracode
Remote Code Execution (RCE) Through Deserialization
2017-07-07 10:32:10
zdt
zdt
Moodle CMS 2.5.0-1 Cross Site Scripting Vulnerability
2013-09-17 00:00:00
cve
cve
CVE-2013-5674
2013-09-16 13:02:48
ubuntucve
ubuntucve
CVE-2013-5674
2013-09-16 00:00:00
securityvulns
securityvulns