Remote Code Execution (RCE)

🗓️ 25 Jul 2022 22:01:46Reported by Veracode Vulnerability DatabaseType

Moodle vulnerability to Remote Code Executio

Reporter	Title	Published	Views	Family All 61
GithubExploit	Exploit for Improper Input Validation in Moodle	6 Mar 202310:09	–	githubexploit
ATTACKERKB	CVE-2022-35649	25 Jul 202216:15	–	attackerkb
Circl	CVE-2022-35649	26 Jul 202203:47	–	circl
CNNVD	Moodle 输入验证错误漏洞	18 Jul 202200:00	–	cnnvd
CNVD	Moodle Input Validation Error Vulnerability (CNVD-2022-54911)	20 Jul 202200:00	–	cnvd
CVE	CVE-2022-35649	25 Jul 202215:27	–	cve
Cvelist	CVE-2022-35649	25 Jul 202215:27	–	cvelist
EUVD	EUVD-2022-6451	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 36 Update: moodle-3.11.8-1.fc36	27 Jul 202202:24	–	fedora
Fedora	[SECURITY] Fedora 35 Update: moodle-3.11.8-1.fc35	27 Jul 202202:35	–	fedora

Vulners

Node

moodle moodle/moodleRangev1.0.0–1.0.0php

moodle moodle/moodleRangev3.11.0–3.11.0php

moodle moodle/moodleRangev4.0.0-beta–4.0.0-betaphp

Source	Link
moodle	www.moodle.org/mod/forum/discuss.php
github	www.github.com/moodle/moodle/commit/0397ea7e593c85466bbea277976676f187bdb58d
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MTKUSFPSYFINSQFSOHDQIDVE6FWBEU6V/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MOKYVRNFNAODP2XSMGJ5CRDUZCZKAR3/
git	www.git.moodle.org/gw
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

07 Nov 2023 22:08Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.8

EPSS0.07485