PT-2024-5807 · Moodle +2 · Moodle +2

🗓️ 27 Aug 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Moodle vulnerability allows remote code execution, affecting versions before 4.4.2. Update recommended.

Reporter	Title	Published	Views	Family All 533
GithubExploit	Exploit for Code Injection in Moodle	13 Oct 202502:32	–	githubexploit
GithubExploit	Exploit for Code Injection in Moodle	13 Jul 202504:52	–	githubexploit
GithubExploit	Exploit for Code Injection in Moodle	7 Feb 202519:48	–	githubexploit
GithubExploit	Exploit for Code Injection in Moodle	28 Jun 202508:49	–	githubexploit
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, which exists due to the lack of measures taken to protect the structure of the web page, allows a hacker to execute arbitrary code.	30 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the lack of authentication, allows a violator to delete data.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the manipulation of cross-site requests, allows a hacker to perform a CSRF attack.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to improper restrictions on the path name to a limited catalog, allows a intruder to gain access to confidential data.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the virtual learning environment Moodle, related to the disclosure of information through caching, allows a perpetrator to gain access to confidential information.	25 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the virtual learning environment Moodle, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries in the database.	25 Nov 202400:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/moodle_rce.rb
github	www.github.com/RedTeamPentesting/moodle-rce-calculatedquestions
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2024-10192
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.org/CVERecord
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates
bdu	www.bdu.fstec.ru/vul/2025-04743
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

02 Jul 2025 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 29

CVSS 3.18.8

EPSS0.88917

SSVC