Remote Code Execution (RCE)

Moodle is vulnerable to remote code execution RCE. A malicious user can use the portfolio API callback to upload and execute malicious files...

CVE-2012-5479

The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback...