Description

Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.

Remediation

References

CVE-2008-0123

Related Vulnerabilities

WordPress Plugin All-in-One WP Migration Cross-Site Scripting (7.62)

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files Multiple Cross-Site Scripting Vulnerabilities (1.3.8)

WordPress Plugin Question and Answer Forum 'title' Variable Cross-Site Scripting (1.2.4)

Open Resty Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-9230)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2022-27912)

Severity

Medium

Classification

CVE-2008-0123 CWE-707

Tags

Missing Update Known Vulnerabilities