Lucene search
MitreCVELIST:CVE-2014-9060HistoryNov 24, 2014 - 11:00 a.m.
CVE-2014-9060
2014-11-2411:00:00
mitre
www.cve.org
3
The LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not properly restrict the parameters used in a return URL, which allows remote attackers to trigger the generation of arbitrary messages via a modified URL, related to mod/lti/locallib.php and mod/lti/return.php.
Related
prion
prion
Code injection
2014-11-24 11:59:00
nvd
nvd
CVE-2014-9060
2014-11-24 11:59:15
osv
osv
Moodle allows attackers to trigger the generation of arbitrary messages
2022-05-13 01:12:43
ubuntucve
ubuntucve
CVE-2014-9060
2014-11-24 00:00:00
veracode
veracode
Unauthorized Printing Of Arbitrary Message
2017-07-27 03:33:25
github
github
Moodle allows attackers to trigger the generation of arbitrary messages
2022-05-13 01:12:43
cve
cve
CVE-2014-9060
2014-11-24 11:59:15
nessus
nessus