Moodle CMS 3.1.2 Cross Site Scripting / File Upload Vulnerabilities

ID 1337DAY-ID-26200
Type zdt
Reporter Vadodil Joel Varghese
Modified 2016-11-02T00:00:00


Exploit for php platform in category web applications

                                            Title: Multiple Vulnerabilities - Moodle CMS -3.1.2
Application: Moodle CMS
Versions Affected: <= 3.1.2
Vendor URL:
Software URL:
Discovered by: Joel Vadodil Varghese
Tested on: Windows 10 Pro
Bugs: Persistent Cross Site Scripting, Non-Persistent Cross Site Scripting
and Arbitrary File Upload
Date: 13-Sept-2016

- Parameters "s_additionalhtmlhead", "s_additionalhtmltopofbody" and
"s_additionalhtmlfooter" are vulnerable to Stored XSS (Requires admin
- Parameter "add these tags" is vulnerable to Non-Persistent XSS (Requires
normal user access)
- Possible to upload ".jpg.test" file in the image section (Requires normal
user access)
- Possible to upload ".exe" files in legacy course files and file
manager (Requires
normal user access)

# [2018-03-13]  #