Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-3630)

Description

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

Remediation

References

CVE-2013-3630

Related Vulnerabilities

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.15)

WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Cross-Site Scripting (1.5.5)

WordPress 2.3.3 Directory Traversal Vulnerability (0.6.2 - 2.3.3)

Drupal Core 4.7.x Security Bypass (4.7.0 - 4.7.7)

WordPress Plugin Mang Board WP SQL Injection (1.9.9)

Severity

Medium

Classification

CVE-2013-3630 CWE-94