Description

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

Remediation

References

CVE-2013-3630

Related Vulnerabilities

WordPress Plugin Delete All Comments Easily Cross-Site Request Forgery (1.3)

Oracle Database Server CVE-2006-5341 Vulnerability (CVE-2006-5341)

Joomla Improper Input Validation Vulnerability (CVE-2016-8870)

WebLogic CVE-2016-0572 Vulnerability (CVE-2016-0572)

WordPress Plugin Link Library SQL Injection (5.9.13.26)

Severity

Medium

Classification

CVE-2013-3630 CWE-94

Tags

Missing Update Known Vulnerabilities