Directory Traversal

Moodle is susceptible to directory traversal attacks. The attacks exist because the mingetslashargument function in lib/configonlylib.php does not filter .. dot dot in the file parameter, allowing read access of arbitrary files through it...

Moodle File Read

The vulnerability of the mingetslashargument function in the lib/configonlylib.php component of the Moodle learning management system exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

CVE-2015-1493

Directory traversal vulnerability in the mingetslashargument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter, as demonstrated ...

CVE-2015-1493: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the mingetslashargument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter, as demonstrated ...

Moodle 'min_get_slash_argument()' Information Disclosure Vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability in Moodle 'mingetslashargument' allows remote attackers to exploit the vulnerability to obtain sensitive information...