Moodle-authenticated-RCE

Moodle 4.4.0 - 인증된 원격 코드 실행 CVE-2024-43425 익스플로잇 CVE: CVE-2024-43425 영향을 받는 버전 Moodle 4.4 4.4.1 Moodle 4.3 4.3.5 Moodle 4.2 4.2.8 Moodle 4.1 4.1.11 설명 이 익스플로잇은 위에 나열된 Moodle 버전에서 인증된 원격 코드 실행RCE 취약점을 대상으로 합니다. 유효한 자격 증명을 가진 공격자가 안전하지 않은 문제 은행 편집 기능을 악용하여 서버에서 임의의 명령을 실행할 수 있습니다. 사용 방법 1. 이 저장소를...

CVE-2022-35650

CVE-2022-35650 これはMoodleにおける任意のファイル読み取りです。 前提条件 教師または管理者レベルのユーザーを侵害している必要があります。 手順 1. このリポジトリをクローンします: root@kitploit: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. 次のコマンドでエクスプロイトをzipに圧縮します root@kitploit: zip exploit.zip imsmanifest.xml pool.dat 3. 自分のアカウントに書き込みアクセス権があるコースに移動します。 4...

CVE-2026-79615 Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

The Quiz and Survey Master QSM WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other...

EUVD-2022-2237

Malicious code in bioql PyPI...

EUVD-2022-4709

Malicious code in bioql PyPI...

EUVD-2025-4271

Malicious code in bioql PyPI...

BIT-MOODLE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

Moodle 4.4.4 < 4.4.5 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Moodle 4.3.x < 4.3.8 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Moodle 4.5.x < 4.5.1 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Cross-site Scripting (XSS)

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to missing sanitization in the question bank filter. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious scrip...

GHSA-4W32-C9G7-27QX Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

UBUNTU-CVE-2025-26530

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

CVE-2025-26530 concerns Moodle where the question bank filter allowed a reflected XSS risk due to insufficient sanitization. The connected documents corroborate a reflected XSS in Moodle’s question bank filter, without detailing affected versions or patches in the provided sources. The CVE descri...

PT-2025-7785 · Red Os · Red Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a reflected XSS risk due to insufficient sanitizing in the question bank filter. Recommendations: At the moment, there is no information about a newer version that...