Remote Code Execution (RCE)

Moodle is vulnerable to remote code execution. A malicious user can update the spellchecking mechanism to point to a arbitrary command, executing the command when a spellchecking request occurs. Note: The Moodle developers are not going to fix this vulnerability...