Moodle-CVE-2024-43425-Exploit

Moodle RCE 익스플로잇 CVE-2024-43425 이 저장소는 Moodle CVE-2024-43425의 원격 코드 실행 RCE 취약점을 대상으로 하는 Python 익스플로잇 스크립트를 포함하고 있습니다. 면책: 이 도구는 교육 및 연구 목적으로만 있는 그대로 제공됩니다. 명시적 테스트 허가를 받은 시스템에서만 사용하십시오. 작성자는 이 스크립트의 오용으로 인한 손해나 법적 문제에 대해 책임을 지지 않습니다. 질문 ID 추출 실패 오류: 질문 생성 페이지에 접근하여 값을 확인하세요. categories HTML 태그에...

Moodle-authenticated-RCE

Moodle 4.4.0 - 인증된 원격 코드 실행 CVE-2024-43425 익스플로잇 CVE: CVE-2024-43425 영향을 받는 버전 Moodle 4.4 4.4.1 Moodle 4.3 4.3.5 Moodle 4.2 4.2.8 Moodle 4.1 4.1.11 설명 이 익스플로잇은 위에 나열된 Moodle 버전에서 인증된 원격 코드 실행RCE 취약점을 대상으로 합니다. 유효한 자격 증명을 가진 공격자가 안전하지 않은 문제 은행 편집 기능을 악용하여 서버에서 임의의 명령을 실행할 수 있습니다. 사용 방법 1. 이 저장소를...

Moodle - Remote Code Execution

Attackers with the permission to create or modify questions in Moodle courses are able to craft malicious inputs for calculated questions, which can be abused to execute arbitrary commands on the underlying system. id: CVE-2024-43425 info: name: Moodle - Remote Code Execution author:...

moodle-rce-calculatedquestions

Moodleの計算問題における入力検証をテストするスクリプト CVE-2024-43425 このリポジトリには、ブログ記事「Back to School - Exploiting a Remote Code Execution Vulnerability in Moodle」（Moodle学習プラットフォームにおけるリモートコード実行の脆弱性について説明）の付属スクリプトが含まれています。 検証ロジックのテスト validationディレクトリ内のスクリプトを使用して、PHPのeval呼び出しの悪用を防ぐためにMoodleが使用する検証ロジックに対して、入力文字列を直接テストできます。...

📄 Moodle 4.x PHP Code Injection

This proof of concept demonstrates a code injection vulnerability in Moodle versions 4.x. ============================================================================================================================================= | Title : Moodle 4.x PHP Code Injection Vulnerability | | Author ...

Linux Distros Unpatched Vulnerability : CVE-2024-43425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the...

Exploit for Code Injection in Moodle

Moodle 4.4.0 - Authenticated Remote Code Execution CVE-2024-4...

Moodle 4.4.0 - Authenticated Remote Code Execution

Exploit Title: Moodle 4.4.0 - Authenticated Remote Code Execution Exploit Author: Likhith Appalaneni Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/releases/tag/v4.4.0 Tested Version: Moodle 4.4.0 Affected versions: 4.4 to 4.4.1, 4.3 to 4.3.5, 4.2 to 4.2.8, 4....

Exploit for Code Injection in Moodle

CVE-2024-43425-Poc CVE Overview CVE ID: CVE-2024-43425 Descr...

Exploit for Code Injection in Moodle

This is a PoC exploit for CVE-2024-43425, a vulnerability in Moo...

CVE-2024-43425

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions...

CVE-2024-43425

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions...

CVE-2024-43425 Moodle: remote code execution via calculated question types

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions...

CVE-2024-43425

creationtimestamp| type| source ---|---|--- 2024-08-28 09:02:28+00:00| published-proof-of-concept| Telegram/sV1gHuMmsF6Obkl4pHuEINogRh1QzHPw2lXaflMTbK27AeDb 2024-08-29 09:08:14+00:00| published-proof-of-concept| https://t.me/HackingInsights/11532 2024-08-29 14:20:05+00:00|...

Moodle Remote Code Execution (CVE-2024-43425)

This module exploits a command injection vulnerability in Moodle CVE-2024-43425 to obtain remote code execution. Affected versions include 4.4 to 4.4.1, 4.3 to 4.3.5, 4.2 to 4.2.8, 4.1 to 4.1.11, and earlier unsupported versions. Module Options msf use exploit/linux/http/moodle/rce msf undefinedr...