CVE-2004-1424

CVE-2004-1424 affects Moodle 1.4.2 and earlier. A cross-site scripting (XSS) flaw exists in view.php where the search parameter can be exploited to inject arbitrary scripts/HTML. This is a remote, unauthenticated vector; impact includes potential partial integrity compromise and user-facing scrip...