Moodle 3.x Multiple Vulnerabilities (May 2018) - Windows

Moodle CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

CVE-2018-1137

An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack...

CVE-2018-1137

CVE-2018-1137 affects Moodle 3.x. The issue arises when URLs in portfolios are substituted, allowing an attacker to instantiate any class. This can be exploited by users logged in as guests to launch a DDoS attack. Publicly documented details describe the vulnerability mechanism and impact; no re...