Moodle-authenticated-RCE

Moodle 4.4.0 - 已验证远程代码执行 CVE-2024-43425 漏洞利用 CVE: CVE-2024-43425 受影响版本 Moodle 4.4 至 4.4.1 Moodle 4.3 至 4.3.5 Moodle 4.2 至 4.2.8 Moodle 4.1 至 4.1.11 描述 该漏洞利用针对上述 Moodle 版本中已验证的远程代码执行（RCE）漏洞。它允许拥有有效凭据的攻击者通过利用不安全的题库编辑功能在服务器上执行任意命令。 使用方法 1. 克隆或下载此仓库。 2. 安装所需的依赖项： root@kitploit: pip install -r...

CVE-2022-35650

CVE-2022-35650 这是一个在 Moodle 中的任意文件读取漏洞。 前提条件 你必须已攻破教师或管理员级别的用户账户。 步骤 1. 克隆此仓库： root@kitploit: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. 运行此命令来打包漏洞利用文件： root@kitploit: zip exploit.zip imsmanifest.xml pool.dat 3. 浏览到一个你的账户拥有写入权限的课程。 4. 导航到 '题库'。 5. 从下拉菜单中选择 '导入'。 6. 选择 'blackboar...

CVE-2026-79615 Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR

The Quiz and Survey Master QSM WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other...

EUVD-2022-4709

Malicious code in bioql PyPI...

EUVD-2025-4271

Malicious code in bioql PyPI...

EUVD-2022-2237

Malicious code in bioql PyPI...

BIT-MOODLE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

Moodle 4.3.x < 4.3.8 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Moodle 4.4.4 < 4.4.5 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Moodle 4.5.x < 4.5.1 Reflected XSS In Question Bank Filter

According to its self-reported version, the Moodle install hosted on the remote host is 4.3.x prior to 4.3.8 or 4.4.4 prior to 4.4.5 or 4.5.x prior to 4.5.1 . It is, therefore, affected by a Reflected XSS in question bank filter. Note that the scanner has not tested for these issues but has inste...

Cross-site Scripting (XSS)

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to missing sanitization in the question bank filter. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious scrip...

GHSA-4W32-C9G7-27QX Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

Moodle allows reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

UBUNTU-CVE-2025-26530

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530 Reflected XSS via question bank filter

The question bank filter required additional sanitizing to prevent a reflected XSS risk...

CVE-2025-26530

CVE-2025-26530 concerns Moodle where the question bank filter allowed a reflected XSS risk due to insufficient sanitization. The connected documents corroborate a reflected XSS in Moodle’s question bank filter, without detailing affected versions or patches in the provided sources. The CVE descri...

PT-2025-7785 · Red Os · Red Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a reflected XSS risk due to insufficient sanitizing in the question bank filter. Recommendations: At the moment, there is no information about a newer version that...