Directory Traversal

Moodle is susceptible to directory traversal attacks. The attacks exist because the mingetslashargument function in lib/configonlylib.php does not filter .. dot dot in the file parameter, allowing read access of arbitrary files through it...

The vulnerability of the Moodle learning management system allows a hacker to access and read arbitrary files.

The vulnerability of the mingetslashargument function in the lib/configonlylib.php component of the Moodle learning management system exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

CVE-2015-1493: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the mingetslashargument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter, as demonstrated ...

Moodle 'min_get_slash_argument()' Information Disclosure Vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability in Moodle 'mingetslashargument' allows remote attackers to exploit the vulnerability to obtain sensitive information...