Moodle 2.1.x < 2.1.9 / 2.2.x < 2.2.6 / 2.3.x < 2.3.3 Multiple Vulnerabilities

Binary data 9528.prm...

CVE-2012-5479

The CVE concerns the Moodle Portfolio plugin. Affected releases are Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3. The vulnerability allows remote authenticated users to upload and execute files via a modified Portfolio API callback. This results in arbitrary code executio...