Lucene search
GoogleOSV:GHSA-WXQG-FG7V-MMC6HistoryMay 13, 2022 - 1:05 a.m.
Moodle Authenticated Spelling Binary Remote Code Execution
2022-05-1301:05:39
Google
osv.dev
15
moodle
remote code execution
authenticated
tinymce
binary
security vulnerability
EPSS
0.022
Percentile
89.9%
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
References
packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html
community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one
community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
github.com/moodle/moodle
nvd.nist.gov/vuln/detail/CVE-2013-3630
Related
checkpoint_advisories
checkpoint_advisories
Moodle Spellcheck Remote Command Execution (CVE-2013-3630)
2014-11-18 00:00:00
github
github
Moodle Authenticated Spelling Binary Remote Code Execution
2022-05-13 01:05:39
prion
prion
Code injection
2013-11-01 02:55:00
cve
cve
CVE-2013-3630
2013-11-01 02:55:04
veracode
veracode
Remote Code Execution (RCE)
2017-07-07 08:03:47
packetstorm
packetstorm
Moodle Remote Command Execution
2013-10-30 00:00:00
Moodle SpellChecker Path Authenticated Remote Command Execution
2021-10-12 00:00:00
Moodle Authenticated Spelling Binary Remote Code Execution
2021-10-12 00:00:00
nvd
nvd
CVE-2013-3630
2013-11-01 02:55:04
exploitdb
exploitdb
Moodle - Remote Command Execution (Metasploit)
2013-10-31 00:00:00
zdt
zdt
Moodle Remote Command Execution Vulnerability
2013-10-31 00:00:00
Moodle SpellChecker Path Authenticated Remote Command Execution Exploit
2021-10-13 00:00:00
Moodle Authenticated Spelling Binary Remote Code Execution Exploit
2021-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2013-3630
2013-11-01 00:00:00
cvelist
cvelist
CVE-2013-3630
2013-11-01 01:00:00
nessus
nessus
Fedora 18 : moodle-2.3.10-1.fc18 (2013-21354)
2013-11-25 00:00:00
Fedora 19 : moodle-2.4.7-1.fc19 (2013-21397)
2013-11-25 00:00:00
Fedora 20 : moodle-2.5.3-1.fc20 (2013-21312)
2013-11-25 00:00:00
metasploit
metasploit
Moodle SpellChecker Path Authenticated Remote Command Execution
2021-08-29 14:50:25
Moodle Authenticated Spelling Binary RCE
2021-08-29 14:50:25
fedora
fedora
[SECURITY] Fedora 20 Update: moodle-2.5.3-1.fc20
2013-11-24 03:29:31
[SECURITY] Fedora 18 Update: moodle-2.3.10-1.fc18
2013-11-23 19:35:25
[SECURITY] Fedora 19 Update: moodle-2.4.7-1.fc19
2013-11-23 19:49:20
openvas
openvas
Fedora Update for moodle FEDORA-2013-21354
2013-11-26 00:00:00
Fedora Update for moodle FEDORA-2013-21354
2013-11-26 00:00:00
Fedora Update for moodle FEDORA-2013-21397
2013-11-26 00:00:00