Upload-size Restriction Bypass

Moodle is vulnerable to upload-size restriction bypass. Authenticated users can bypass intended upload-size restrictions due to a flaw in repository/repositoryajax.php using a -1 value in the maxbytes field...

CVE-2012-4400

repository/repositoryajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended upload-size restrictions via a -1 value in the maxbytes field...