Lucene search
Veracode Vulnerability DatabaseVERACODE:4473HistoryJun 23, 2017 - 4:18 a.m.
Multiple Cross-Site Scripting (XSS)
2017-06-2304:18:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
EPSS
0.001
Percentile
43.9%
Moodle is vulnerable to multiple cross-site scripting (XSS) attacks. The attacks can be triggered because the file picker module does not properly handle filenames from users, allowing the attackers to upload files with filenames containing malicious code.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37507
lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html
lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html
openwall.com/lists/oss-security/2013/03/25/2
git.moodle.org/gw?p=moodle.git;a=commit;h=954b35451112c333c0ae77dff25dafbf41587c26
moodle.org/mod/forum/discuss.php?d=225344
Related
cvelist
cvelist
CVE-2013-1833
2013-03-25 21:00:00
nvd
nvd
CVE-2013-1833
2013-03-25 21:55:04
ubuntucve
ubuntucve
CVE-2013-1833
2013-03-11 00:00:00
github
github
prion
prion
Cross site scripting
2013-03-25 21:55:00
cve
cve
CVE-2013-1833
2013-03-25 21:55:04
osv
osv
nessus
nessus
Fedora 18 : moodle-2.3.6-1.fc18 (2013-4387)
2013-04-03 00:00:00
Fedora 17 : moodle-2.2.9-1.fc17 (2013-4404)
2013-04-03 00:00:00
openvas
openvas
Fedora Update for moodle FEDORA-2013-4387
2013-04-05 00:00:00
Fedora Update for moodle FEDORA-2013-4404
2013-04-05 00:00:00
Fedora Update for moodle FEDORA-2013-4387
2013-04-05 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: moodle-2.3.6-1.fc18
2013-04-03 04:44:25
[SECURITY] Fedora 17 Update: moodle-2.2.9-1.fc17
2013-04-03 04:26:27