This host is running Moodle CMS and is prone to Multiple Vulnerabilities.

Successful exploitation will allow remote attackers to cause Cross Site Scripting attacks, can gain sensitive information about the user or the remote host or can delete unauthorised posts through injecting malicious web scripts. Impact level: System/Application

Upgrade to latest version 1.6.9, 1.7.7, 1.8.8 and 1.9.4 http://moodle.org/downloads

Multiple flaws are due to - Vulnerability in post.php for IMG tag which allows unauthorised access to user's posts. - XSS Vulnerability in course/lib.php which allows injection of arbitrary web scripts or malicious HTML codes while displaying the log report in browser due to lack of sanitization. - Unspecified vulnerability in the Calendar export feature which causes conducting brute force attacks. - XSS Vulnerability in blocks/html/block_html.php which allows injection of arbitracy scripts of malformed HTML codes injection.

Moodle version from 1.6 prior to 1.6.9, Moodle version from 1.7 prior to 1.7.7, Moodle version from 1.8 prior to 1.8.8 and Moodle version from 1.9 prior to 1.9.4 on all platforms.

• http://moodle.org/security
• http://www.openwall.com/lists/oss-security/2009/02/04/1

---

Updated on 2015-03-25