Directory Traversal

Moodle is susceptible to directory traversal attacks. The attacks exist because the mingetslashargument function in lib/configonlylib.php does not filter .. dot dot in the file parameter, allowing read access of arbitrary files through it...

The vulnerability of the Moodle learning management system allows a hacker to access and read arbitrary files.

The vulnerability of the mingetslashargument function in the lib/configonlylib.php component of the Moodle learning management system exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

Moodle 'min_get_slash_argument()' Information Disclosure Vulnerability

Moodle is an open source web-based teaching and learning application. A security vulnerability in Moodle 'mingetslashargument' allows remote attackers to exploit the vulnerability to obtain sensitive information...